Device identification for IoT projects ?

[plsplds]

What is the best way to do device identification for an IoT project? Is the mac address a secure way of doing it?

[WiFive]

Too vague. Identification or authentication? Protecting against what kind of spoofing/attack? Search for how devices are "provisioned" or "commissioned" on aws iot, xively, etc...