In 3GPP-LTE to WiFi handover can have two cases -
1) Trusted Access : operator-built Wi-Fi access with over-the-air encryption and a secure authentication method which is generally provided by the operator.
2) Untrusted Access : Untrusted access includes any type of Wi-Fi access that either is not under control of the operator (public open hotspot, subscriber’s home WLAN, etc.) or that does not provide sufficient security (authentication, encryption, etc.).
Check the call flow of the handover in the following documents (difficult to describe here as this is a big space) -
3GPP TS 23.402
3GPP TS 24.302