A blockchain-based configuration profile provisioning system includes a client device that generates and broadcasts a blockchain transaction that identifies the client device and is directed to a blockchain address that is included in a blockchain. A blockchain device receives the blockchain transaction broadcast by the client device, executes a smart contract associated with the blockchain address, and determines that the execution of the smart contract has provided an indication that the client device identified in the blockchain transaction is authorized to receive a configuration profile. In response, the blockchain device causes a configuration profile token to be generated and transmitted. A configuration profile system receives the configuration profile token and, in response, retrieves and transmits the configuration profile to the client device.