Multifactor authentication for internet-of-things devices

A method comprising:

• receiving, at a computing device that hosts a resource and from an Internet-of-things device, an access request via which the Internet-of-things device requests access to the resource, wherein the access request comprises a header comprising an IP address that is associated with the Internet-of-things device, and a certificate that is used by the Internet-of-things device to encode the access request, wherein the certificate is issued to the Internet-of-things device in response to a security management platform receiving a registration request that requests registration of the Internet-of-things device for multifactor authentication;
• sending, by the computing device and to the security management platform, a request to validate the certificate received with the access request;
• receiving, by the computing device and from the security management platform, a decision that indicates if the certificate is validated by the security management platform;
• if the decision indicates that the certificate is validated,
• obtaining, by the computing device and from a gateway that assigned the IP address to the Internet-of-things device, a stored version of the IP address,
• determining, by the computing device, if the stored version of the IP address matches the IP address that was included in the header, and
• in response to determining that the stored version of the IP address matches the IP address that was included in the header, allowing, by the computing device, the Internet-of-things device to access the resource;
• and
• if the decision indicates that the certificate is not validated by the security management platform, blocking, by the computing device, the Internet-of-things device from accessing the resource.

A computer storage medium having computer-executable instructions stored thereon that, when executed by a processor, cause the processor to perform operations comprising:

• receiving, at a computing device that hosts a resource and from an Internet-of-things device, an access request via which the Internet-of-things device requests access to the resource, wherein the access request comprises a header comprising an IP address that is associated with the Internet-of-things device, and a certificate that is used by the Internet-of-things device to encode the access request, wherein the certificate is issued to the Internet-of-things device in response to a security management platform receiving a registration request that requests registration of the Internet-of-things device for multifactor authentication;
• sending, to the security management platform, a request to validate the certificate received with the access request;
• receiving, from the security management platform, a decision that indicates if the certificate is validated by the security management platform;
• if the decision indicates that the certificate is validated,
• obtaining, from a gateway that assigned the IP address to the Internet-of-things device, a stored version of the IP address,
• determining if the stored version of the IP address matches the IP address that was included in the header, and
• in response to determining that the stored version of the IP address matches the IP address that was included in the header, allowing the Internet-of-things device to access the resource;
• and
• if the decision indicates that the certificate is not validated by the security management platform, blocking the Internet-of-things device from accessing the resource.