A method comprising: as part of a configuration process of a wireless device by a Device Provisioning Protocol, DPP, configurator device: receiving, by the DPP configurator device from the wireless device, a configuration request including a configuration attribute of the wireless device; mapping, by the DPP configurator device using a first mapping comprising information that maps between configuration attributes and respective credential attributes, the configuration attribute in the configuration request received from the wireless device to a corresponding credential attribute, the corresponding credential attribute to be mapped to a corresponding network policy; and sending, by the DPP configurator device, a configuration response including the corresponding credential attribute to the wireless device, the corresponding credential attribute useable by the wireless device to access an access point, AP; as part of a configuration process of the AP by the DPP configurator device: sending, by the DPP configurator device to the AP, a second mapping comprising a mapping table including information that maps between the credential attributes and respective network policies, for use by the AP in obtaining, responsive to the corresponding credential attribute received by the AP from the wireless device, the corresponding network policy to apply to a communication of the wireless device; wherein the configuration attribute in the configuration request comprises a Device Provisioning Protocol, DPP, configuration attribute, and the corresponding credential attribute comprises a DPP Connector attribute; and wherein the configuration process of the wireless device by the DPP configurator device is performed without an authentication server different from the DPP configurator device. receiving, by the DPP configurator device from the wireless device, a configuration request including a configuration attribute of the wireless device; mapping, by the DPP configurator device using a first mapping comprising information that maps between configuration attributes and respective credential attributes, the configuration attribute in the configuration request received from the wireless device to a corresponding credential attribute, the corresponding credential attribute to be mapped to a corresponding network policy; and sending, by the DPP configurator device, a configuration response including the corresponding credential attribute to the wireless device, the corresponding credential attribute useable by the wireless device to access an access point, AP; as part of a configuration process of the AP by the DPP configurator device: sending, by the DPP configurator device to the AP, a second mapping comprising a mapping table including information that maps between the credential attributes and respective network policies, for use by the AP in obtaining, responsive to the corresponding credential attribute received by the AP from the wireless device, the corresponding network policy to apply to a communication of the wireless device; wherein the configuration attribute in the configuration request comprises a Device Provisioning Protocol, DPP, configuration attribute, and the corresponding credential attribute comprises a DPP Connector attribute; and wherein the configuration process of the wireless device by the DPP configurator device is performed without an authentication server different from the DPP configurator device. sending, by the DPP configurator device to the AP, a second mapping comprising a mapping table including information that maps between the credential attributes and respective network policies, for use by the AP in obtaining, responsive to the corresponding credential attribute received by the AP from the wireless device, the corresponding network policy to apply to a communication of the wireless device; wherein the configuration attribute in the configuration request comprises a Device Provisioning Protocol, DPP, configuration attribute, and the corresponding credential attribute comprises a DPP Connector attribute; and wherein the configuration process of the wireless device by the DPP configurator device is performed without an authentication server different from the DPP configurator device.