Network slice-specific authentication and authorization

There is disclosed a first method, for a User Equipment (UE) in a network. The first method comprises: determining that the UE does not have an allowed NSSAI; and initiating or performing a procedure if a condition is satisfied, wherein the condition comprises: the procedure relates to a predefined type of service, transmission of data of a predefined type, and/or transmission of a NAS message. There is also disclosed a second method, for a network entity (e.g. an AMF entity) in a network comprising the entity and a User Equipment (UE). The second method comprises: determining that the UE does not have an allowed NSSAI; and transmitting, to the UE, a first message indicating whether or not a certain procedure is allowed, available or supported when the UE does not have an allowed NSSAI, wherein the procedure relates to a predefined type of service, transmission of data of a predefined type, and/or transmission of a NAS message.