Zero Trust at GitLab: Implementation challenges (and a few solutions)

What this post added

This post details challenges in implementing Zero Trust Networking (ZTN), specifically around user identity and device management. It highlights the difficulties in provisioning users quickly in a growing company and the unique challenge of managing devices in a BYOD-rooted culture with a standardized Linux/Mac infrastructure. The post also discusses the complexities of managing sprawling infrastructure with SSH access and the lack of two-factor authentication enforcement for SSH. Wins include the implementation of Okta for user identity management, which significantly reduced provisioning times, and the use of Chef/Knife for infrastructure changes. The team is exploring Okta's Advanced Server Access (ASA) to integrate SSH accounts and enforce multi-factor authentication, GeoIP, and other security measures for server administration.