A procedure (400) comprising the following: Received (402) by an
authentication server (104; 602), a Device Provisioning Protocol (DPP) network access
authorization request from an access point (AP) (106; 702) communicating with an IoT device (102), wherein the DPP network access
authorization request includes a connect ID, the connect ID being a hash of a
public network access key of the IoT device; Determine (404), through the
authentication server, a validity of the connection ID; and in response to a determination that the connection identifier is valid, Determine (408), by the
authentication server, a configurable policy from a set of configurable policies applicable to the IoT device, wherein the configurable policy includes network permissions, Transmitted (410), by the
authentication server, which grants network permissions to the AP to connect the IoT device to a
wireless network (116), Received, by the
authentication server, a DPP bootstrap
authorization request from the AP communicating with the IoT device, wherein the DPP bootstrap authorization request includes a hash of a public
bootstrapping key of the IoT device; Determine, via the
authentication server, whether the hash of the public
bootstrapping key is valid; and In response to a determination that the hash of the public
bootstrapping key is valid, the authentication server transmits the public bootstrapping key for the IoT device to the AP.