Abstract: A service provider receives a request to attach a subscription to a client node. The request can be an authenticated request by an entity associated with the client node. In response to the request, information is stored that indicates the client node is authorized for the subscription. A service can determine a connection by the client node to a service. The connection can trigger the subscription to be created for the client node.

Abstract: A device management service to facilitate onboarding of a remote IoT device may receive, from a client service, a request for a session certificate for a remote device. The device management service may send the session certificate to the client service, where the session certificate is valid for the remote device to obtain a primary certificate during a session duration. The device management service may receive, from the remote device, a request for the primary certificate for the remote device. The device management service may send, to the remote device, the primary certificate, wherein the primary certificate enables communication between the remote device and the device management service, and wherein the primary certificate has a primary duration that is longer than the session duration. The device management service may establish a communication channel with the remote device according to the primary certificate.

Abstract: Systems and methods are provided for dynamically configuring an IoT communications system. The IoT communications system receives a client message from an IoT device. The client message includes an endpoint designation (such as by specifying an endpoint in the Server Name Indication (SNI) field of the TLS client hello message). The IoT communications system determines whether the endpoint is associated with a custom or default processing logic and/or settings. Either custom or default processing logic is executed or custom or default settings are applied.

Abstract: A message broker of a publish-subscribe messaging system (e.g., using the MQTT protocol or other publish-subscribe protocol) detects a life-cycle event for topic subscription and notifies a publisher of the life-cycle event. The message broker may detect a transition in a number of subscribers to a topic from zero subscribers to one or more subscribers or from one or more subscribers to zero subscribers. In response, the message broker provides an indication to the publisher that the number of subscribers to the topic has transitioned from zero to one or more (or from one or more to zero). This causes the publisher to begin publishing messages on the publisher's topic (or to stop publishing messages on the publisher's topic).

Abstract: Systems and methods are provided for dynamically configuring an IoT communications system. The IoT communications system receives a client message from an IoT device. The client message includes an endpoint designation (such as by specifying an endpoint in the Server Name Indication (SNI) field of the TLS client hello message). The IoT communications system determines whether the endpoint is associated with a custom or default processing logic and/or settings. Either custom or default processing logic is executed or custom or default settings are applied.