A non-transitory computer-readable storage medium storing instructions for execution by one or more processors of a mobile device adapted to perform operations comprising: receive a subscription data object, the subscription data object having a hierarchical structure, that includes subscription parameters and policy parameters; wherein the subscription parameters include information for a home service provider of the device; detect networks available at a current location of the device, wherein the networks are public Wi-Fi networks; select a hotspot for connecting to a network of the networks available, giving preference to hotspots operated by the home service provider unless a user preference indicates that preference is not to be given to hotspots operated by the home service provider; automatically perform, without user interaction, an extensible authentication protocol, EAP, based authentication, using a credential type provided in the subscription parameters, with a selected WI-FI network of the networks available, wherein the policy parameters include a roaming partner list that includes a priority for indicating an order of preference for a roaming partner, and wherein when the roaming partner list includes at least two roaming partners, the operations further configure the device to select between the at least two roaming partners based on the priority of each respective roaming partner, and wherein credential data are stored in a separate portion of the hierarchical structure of the management object from the roaming partner list; and offload traffic from a previously connected cellular network to the selected WI-FI network in response to authentication of credential data associated with the selected WI-FI network. receive a subscription data object, the subscription data object having a hierarchical structure, that includes subscription parameters and policy parameters; wherein the subscription parameters include information for a home service provider of the device; detect networks available at a current location of the device, wherein the networks are public Wi-Fi networks; select a hotspot for connecting to a network of the networks available, giving preference to hotspots operated by the home service provider unless a user preference indicates that preference is not to be given to hotspots operated by the home service provider; automatically perform, without user interaction, an extensible authentication protocol, EAP, based authentication, using a credential type provided in the subscription parameters, with a selected WI-FI network of the networks available, wherein the policy parameters include a roaming partner list that includes a priority for indicating an order of preference for a roaming partner, and wherein when the roaming partner list includes at least two roaming partners, the operations further configure the device to select between the at least two roaming partners based on the priority of each respective roaming partner, and wherein credential data are stored in a separate portion of the hierarchical structure of the management object from the roaming partner list; and offload traffic from a previously connected cellular network to the selected WI-FI network in response to authentication of credential data associated with the selected WI-FI network.