An access device for a wireless network, the device comprising: one or more processors; and a machine-readable medium comprising instructions stored therein, which when executed by the one or more processors, cause the one or more processors to perform operations comprising: broadcasting a message, the message indicating an availability for authentication with a cloud-based service, receiving, from a wireless client device, an authentication request comprising credentials for a user account of the cloud-based service, wherein the message is broadcasted prior to the wireless client device sending the authentication request; forwarding the authentication request to a server associated with the cloud-based service for authentication of the user account credentials; receiving, from the server, a list of one or more network identifiers corresponding to networks for which access by the user account of the cloud-based service is authorized; and sending the received list of one or more network identifiers to the wireless client device, wherein the received list of one or more network identifiers is sent to the wireless client device prior to the wireless client device being associated with the wireless network. one or more processors; and a machine-readable medium comprising instructions stored therein, which when executed by the one or more processors, cause the one or more processors to perform operations comprising: broadcasting a message, the message indicating an availability for authentication with a cloud-based service, receiving, from a wireless client device, an authentication request comprising credentials for a user account of the cloud-based service, wherein the message is broadcasted prior to the wireless client device sending the authentication request; forwarding the authentication request to a server associated with the cloud-based service for authentication of the user account credentials; receiving, from the server, a list of one or more network identifiers corresponding to networks for which access by the user account of the cloud-based service is authorized; and sending the received list of one or more network identifiers to the wireless client device, wherein the received list of one or more network identifiers is sent to the wireless client device prior to the wireless client device being associated with the wireless network. broadcasting a message, the message indicating an availability for authentication with a cloud-based service, receiving, from a wireless client device, an authentication request comprising credentials for a user account of the cloud-based service, wherein the message is broadcasted prior to the wireless client device sending the authentication request; forwarding the authentication request to a server associated with the cloud-based service for authentication of the user account credentials; receiving, from the server, a list of one or more network identifiers corresponding to networks for which access by the user account of the cloud-based service is authorized; and sending the received list of one or more network identifiers to the wireless client device, wherein the received list of one or more network identifiers is sent to the wireless client device prior to the wireless client device being associated with the wireless network.