Secure gateway onboarding via mobile devices for internet of things device management

A non-transitory computer-readable medium embodying instructions executable in at least one computing device of a client device wherein the instructions, when executed, cause the at least one computing device to:

• retrieve an onboarding token using a request for the onboarding token that is authenticated based on user credentials associated with a user account with a management service;
• cause a gateway account to be created using a request to create the gateway account, wherein the request to create the gateway account is transmitted to the management service, wherein the request to create the gateway account comprises a gateway identifier that uniquely identifies a gateway, and wherein the request to create the gateway account is authenticated based on the onboarding token;
• relay gateway credentials for the gateway account from the management service to the gateway, wherein the gateway credentials authenticate communications between the gateway and the management service, and wherein the gateway credentials are stored in a data store of the client device and concealed from users of the client device;
• and
• remove the gateway credentials from the data store based on an event comprising at least one of:
• a transmission of the gateway credentials to the gateway, a confirmation from the gateway that the gateway credentials are received by the gateway, or a confirmation from the management service that the gateway has checked in using the gateway credentials.

A method implemented using a client device, the method comprising:

• retrieving an onboarding token using a request for the onboarding token that is authenticated based on user credentials associated with a user account with a management service;
• causing a gateway account to be created using a request to create the gateway account, wherein the request to create the gateway account is transmitted to the management service, wherein the request to create the gateway account comprises a gateway identifier that uniquely identifies a gateway, and wherein the request to create the gateway account is authenticated based on the onboarding token;
• and
• relaying gateway credentials for the gateway account from the management service to the gateway, wherein the gateway credentials authenticate communications between the gateway and the management service, and wherein the gateway credentials are stored in a data store of the client device and concealed from users of the client device;
• and
• removing the gateway credentials from the data store based on an event comprising at least one of:
• a transmission of the gateway credentials to the gateway, a confirmation from the gateway that the gateway credentials are received by the gateway, or a confirmation from the management service that the gateway has checked in using the gateway credentials.