A method for establishing secure wireless communications, comprising, via a credential-provisioning server in communication with an access point, a database, an access control server, and a network, receiving from a mobile user equipment, via the access point, a request to access the network; sending, to the mobile user equipment, via the access point, a web page sign-in option of a third-party credential; receiving, from the mobile user equipment, via the access point, an indication to use the third-party credential; redirecting the mobile user equipment to a corresponding third-party website login page via the network, and include an identifier; receiving an authorization from the mobile user equipment via the access point, the authorization having been sent to the mobile user equipment from the third-party website after providing valid third-party credential to the third-party website; exchanging the authorization from the mobile user device for an access token from the third-party website via the network; generating a proxy-credential; sending to the access control server the access token to bind the access token to the proxy-credential in the database; sending the proxy-credential to the mobile user equipment via the access point; and authorizing, via the access control server and the access point, the mobile user equipment to establish a secure connection; wherein the method further comprises, via the access control server, subsequent to the mobile user equipment previously accessing the network, receiving the proxy-credential from the mobile user equipment via the access point, the proxy-credential having previously been sent to the mobile user equipment after successfully logging into the third-party website; validating the proxy-credential from the mobile user equipment via the access point; retrieving the access token bound to the received proxy-credential; sending, via the network, the access token to the third-party website for validation; receiving, via the network, an updated access token from the third-party website if the access token is valid; and authorizing the mobile user equipment to establish a secure connection via the access point. receiving from a mobile user equipment, via the access point, a request to access the network; sending, to the mobile user equipment, via the access point, a web page sign-in option of a third-party credential; receiving, from the mobile user equipment, via the access point, an indication to use the third-party credential; redirecting the mobile user equipment to a corresponding third-party website login page via the network, and include an identifier; receiving an authorization from the mobile user equipment via the access point, the authorization having been sent to the mobile user equipment from the third-party website after providing valid third-party credential to the third-party website; exchanging the authorization from the mobile user device for an access token from the third-party website via the network; generating a proxy-credential; sending to the access control server the access token to bind the access token to the proxy-credential in the database; sending the proxy-credential to the mobile user equipment via the access point; and authorizing, via the access control server and the access point, the mobile user equipment to establish a secure connection; receiving the proxy-credential from the mobile user equipment via the access point, the proxy-credential having previously been sent to the mobile user equipment after successfully logging into the third-party website; validating the proxy-credential from the mobile user equipment via the access point; retrieving the access token bound to the received proxy-credential; sending, via the network, the access token to the third-party website for validation; receiving, via the network, an updated access token from the third-party website if the access token is valid; and authorizing the mobile user equipment to establish a secure connection via the access point.