In the connected marketplace, there is a prevalence of subscription-based service models, where devices and equipment are leased and/or monitored by a different organization. Third-party organizations not only access data collected from the IoT devices, but they may also need to access the device itself. This calls for a dynamic IAM infrastructure, which can accommodate:

• Multiple organizational boundaries
• Fast access session setup and teardown with IoT devices
• Granting access at multiple levels of granularity

Consider the example of a turbine evaluator machine on lease, which generates test reports on turbine performance for a fixed number of cycles. To publish the test reports online, this evaluator needs to set up a secure communication channel from the lessee organization to its owning firm. This channel needs to allow only restricted access, which can make access control policies quite complicated for such deployments (IOT-SEC).