Abstract: Bulk joining of computing devices to an identity service is performed in two parts. In the first part, a user of a token retrieval device provides credentials to an identity service, which verifies the credentials and provides to the token retrieval device a bulk token for joining the service. In the second part, the bulk token obtained from the identity service is provided to each computing device in a group of multiple computing devices that are to join the identity service. Each computing device in the group of computing devices communicates with the identity service to join the identity service using the bulk token. The bulk token can be provided to each of the multiple computing devices in the group as part of a provisioning package that includes additional configuration information to be used to configure the computing devices in the group.