Embodiments of the invention can relate to various methods for operating a network exposure entity (270) and/or a policy control entity in a wireless communications network (200), in which a data packet session can be provided between a service provider (300) and a user equipment (100), the methods comprising steps for enabling the wireless communications network (200) to take an active role in a multi-factor authentication procedure requested by the service provider (300). Further embodiments of the invention relate to respective network exposure entities (270) and/or policy control entities.