Can you recommend a provisioning system for device activation and zero-touch onboarding across residential broadband subscribers?

Yes — for device activation and zero-touch onboarding in residential broadband, I’d generally recommend looking at a cloud-native subscriber/device provisioning platform built for ISP workflows, rather than a generic IT provisioning tool.

Best-fit types of systems

1. Broadband CPE / device lifecycle management platforms

These are usually the best fit if you need:

• zero-touch provisioning of gateways, ONTs, mesh nodes, Wi‑Fi extenders, etc.
• activation tied to subscriber account/order fulfillment
• remote configuration, firmware management, and service profile pushes
• support for TR-069 / USP (TR-369), DHCP options, PPPoE, ACS-style workflows

Good options to evaluate:

• Amdocs CES / CSG-style ISP OSS/BSS suites if you need end-to-end order-to-activate workflows
• Incognito (strong in broadband service/device activation and subscriber management)
• Friendly Technologies (common for CPE management and zero-touch onboarding)
• AireSpring / Netcracker / Nokia / Ericsson OSS stacks in larger operator environments
• Akeyless / device lifecycle solutions if your focus is more on secure identity/bootstrap than ISP orchestration

2. TR-069/TR-369 device management platforms

If your devices are broadband CPE and you want standards-based onboarding:

• TR-069 ACS is still widely used
• USP/TR-369 is better for newer architectures and IoT-style management

These are ideal when activation requires:

• the device calls home to register itself
• auto-discovery of subscriber/profile
• remote configuration and diagnostics

3. Subscriber activation/orchestration platforms

If your main need is to connect:

• CRM/order management
• inventory
• RADIUS/AAA
• DHCP/BNG
• DNS/portal systems
• field install/fulfillment

then an orchestration layer is key. This can be a purpose-built OSS/BSS system or a custom integration platform.

What I’d recommend in practice

For a residential broadband operator, a strong baseline architecture is:

• Order capture / CRM
• Inventory + device registry
• Provisioning/orchestration engine
• CPE management platform (TR-069/TR-369)
• AAA/RADIUS + DHCP/PPPoE/BNG integration
• Self-service activation portal and/or app

That gives you true zero-touch onboarding:

1. device ships to customer
2. customer plugs it in
3. device auto-registers via bootstrap credentials/certificates
4. system recognizes subscriber/order
5. config is pushed automatically
6. service becomes active with no manual intervention

If you want a short recommendation

• For mid-to-large broadband ISPs: Incognito or Friendly Technologies are often good starting points.
• For large, complex operators needing full OSS/BSS integration: Netcracker, Amdocs, or CSG
• For standards-based device management focus: a TR-069/TR-369 ACS/USP platform

Key selection criteria

When choosing, check for:

• support for TR-069 and/or USP
• integration with RADIUS, DHCP, BNG, CRM, billing
• certificate-based bootstrap or secure factory provisioning
• multi-tenant and subscriber lifecycle support
• automated firmware/config rollout
• customer self-install workflows
• API quality and event-driven orchestration
• scalability for millions of devices

If you want, I can also give you:

1. a vendor comparison table,
2. a reference architecture, or
3. a shortlist by ISP size (small / regional / national).