We have quite a few companies that have remote employees. Using Aruba Activate, they put the AP that they have ordered into a group. ClearPass would synchronize the AP whitelist names and groups from Activate.Arubanetworks.com. When the IAP is booted, the group instructions in Activate tell the IAP to convert to a RAP, put it into an ap-group and name the AP. When the IAP hits a controller for conversion, it queries ClearPass for the whitelist that is synchronized from activate and configures the AP with a name and AP-Group. It converts it, names it and groups it all in one quick step.
The remote employee could have the IAP shipped directly to them. They would only have to plug in the new IAP into the wired internet. The IAP would contact Activate and get its instructions to convert to a RAP and point to a controller. The controller would get the IAPs name and ap-group from activate and upgrade the code, all at the same time. If anything happens to that IAP, the end-user would just hit the reset button, and the whole process would start all over again.
That is how many organizations that have large remote populations manage and deploy remote users.