Devices ship from a distributor and need a technician, a truck roll, or a long support call to come up with the right configuration.
One tap by an authorized person activates the device against a compliant configuration template and pairs a verified user and location to it.