An embodiment includes receiving at a network node associated with a mobile core network an authorization request from a network device, wherein the authorization request is received via an untrusted network; subsequent to the receiving, performing at the network node authorization of the network device; subsequent to the receiving, determining a preferred network access node for the network device, wherein the determining comprises accessing a node selection information repository containing static and dynamic information related to network access nodes and network access node groupings and wherein the static and dynamic information comprises at least one of resource usage, location, availability of mobility anchors, proximity of mobility anchors, handover opportunities, resiliency class, and time of day; and providing to the network device an initial authorization response comprising a response to the received authorization request, wherein the initial authorization response identifies the determined preferred network access node.