1. A method of admitting a user session in a virtual network, the method comprising: receiving, at a mobility management function in a core network domain, an attach request from a User Equipment associated with the virtual network; performing an authentication challenge with the User Equipment and an Authentication Function associated with the virtual network and outside the core network domain; and admitting the user equipment to a user session in the virtual network in response to successful completion of the authentication challenge.