Auto-enrollment of IoT endpoints

Disclosed are various embodiments for automatic enrollment of Internet of Things (IoT) endpoints. An enrollment request is received from an internet of things (IoT) gateway, the enrollment request comprising an identifier for an IoT endpoint and at least one property of the IoT endpoint. In response to enrollment of the IoT endpoint, a campaign template is identified that matches the at least one property of the IoT endpoint. A campaign associated with the campaign template is then identified, the campaign comprising a collection of policies that are applicable to individual IoT endpoints assigned to the campaign. Subsequently, the IoT endpoint is assigned to the campaign.