A method of authorizing an access point includes receiving a first transmission signal from a first access point. The first transmission signal comprises identifying information of the first access point that includes a first token. The method includes receiving a second transmission signal from a client device. The second transmission signal includes a second token that is received by the client device from an un-provisioned access point. When a match is determined between the first token and the second token, the first access point is identified as the un-provisioned access point. The method includes transmitting the identifying information of the first access point and a request to the client device to authorize the un-provisioned access point. The method includes receiving a third transmission signal from the client device that includes an authorization verification of the un-provisioned access point that authorities the un-provisioned access point to connect to a cloud-managed network.