Systems and methods are described that comprise receiving at a platform an enrollment request from a client device. The enrollment request comprises a request key and device data of the client device. Device identification is generated and issued to the client device in the absence of a previous enrollment event. A response to the client device is generated, and the response is a response to the enrollment request that includes the device identification. Subsequent sessions between the client device and the platform are controlled with the device identification.