Microsoft is currently really pushing the envelope with its secure IOT connectivity and management solution Azure Sphere. Olivier Bloch and Caitie McCaffrey explain how the Security Service is used for on-boarding and updating devices in the episode below.

This is all quite exiting, because the infrastructure provided is great and can be used to register devices securely, but also to distribute OS as well as application updates.
However, it is early and the user interface is well, an API. You can either leverage the CLI version or a REST API to be called from your management solution.
This is great for the start, but as an IOT device manufacturer/end-user a device management SaaS offering related to Azure Sphere (can we call it Intune for devices?), would certainly have the potential to become a game changer in the IOT market.