Azure IoT Hub Device Provisioning Service
Zero-touch enrollment that attests devices by X.509, TPM or symmetric key and assigns them to an IoT hub.
- Provider
- azure
- Category
- Security
- Also known as
- DPS
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| allocationPolicy | enum | evenly-weighted-distribution | lowest-latency | static | custom | no | evenly-weighted-distribution | inherited |
| attestation | enum | x509 | tpm | symmetric-key | no | — | inherited |
| authorizationModel | enum | none | rbac | abac | rebac | no | rbac | ▸ none |
| centralised | boolean | — | no | true | ▸ true |
| crossRegionReplication | boolean | — | no | true | inherited |
| enrollmentGroups | boolean | — | no | true | inherited |
| managed | boolean | — | no | true | ▸ true |
| maxRegistrations | integer | — | no | 1000000 | inherited |
| mfa | boolean | — | no | false | inherited |
| protocol | enum | oidc | saml | oauth2 | iam | custom | no | oidc | ▸ custom |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "iot-dps", component: "azure-iot-dps" }Resource Access Managementalibaba-ramAmazon Cognitoaws-cognitoAmazon Cognito identity poolaws-cognito-identity-poolAWS Directory Serviceaws-directory-serviceAWS IAMaws-iamAWS IAM Identity Centeraws-iam-identity-centerAWS IAM Roles Anywhereaws-iam-roles-anywhereAWS Directory Service Simple ADaws-simple-adMicrosoft Azure Attestationazure-attestationMicrosoft Entra Domain Servicesazure-entra-domain-servicesMicrosoft Entra External IDazure-entra-external-idMicrosoft Entra IDazure-entra-idMicrosoft Entra Verified IDazure-entra-verified-idManaged identities for Azure resourcesazure-managed-identityCloudflare One identity providercloudflare-one-identity-providerActive Directory Domain Servicesactive-directoryAthenzathenzAuth0auth0AutheliaautheliaauthentikauthentikClerkclerkDexdexFreeIPAfreeipaGeneric identity provideridentity-providerKeycloakkeycloakOAuth2 Proxyoauth2-proxyOktaoktaOpenFGAopenfgaOpenLDAPopenldapOryoryPing Identity Platformping-identitySpiceDBspicedbSPIREspireStytchstytchWorkOSworkosZitadelzitadelCloud Identitygoogle-cloud-identityFirebase Authenticationgoogle-firebase-authGoogle Identity Platformgoogle-identity-platformManaged Service for Microsoft Active Directorygoogle-managed-microsoft-ad
and 7 more → Identity provider page# yaml-language-server: $schema=../../schema/component.schema.json # Azure IoT Hub Device Provisioning Service: zero-touch enrollment that attests a device # (X.509, TPM or symmetric key) and assigns it to an IoT hub ("Overview of Azure IoT Hub # Device Provisioning Service"): evenly weighted allocation by default, DR replication on. schemaVersion: "1" type: "component" id: "azure-iot-dps" kind: "identity-provider" provider: "azure" docs: "https://learn.microsoft.com/en-us/azure/iot-dps/about-iot-dps" aliases: ["DPS"] defaults: managed: true protocol: "custom" authorizationModel: "none" centralised: true properties: attestation: type: "enum" values: ["x509", "tpm", "symmetric-key"] allocationPolicy: type: "enum" values: ["evenly-weighted-distribution", "lowest-latency", "static", "custom"] default: "evenly-weighted-distribution" enrollmentGroups: type: "boolean" default: true crossRegionReplication: type: "boolean" default: true maxRegistrations: type: "integer" default: 1000000