Zero Trust at GitLab: Implementation challenges (and a few solutions)

This post details challenges in implementing Zero Trust Networking (ZTN), specifically around user identity and device management. It highlights the difficulties in provisioning users quickly in a growing company and the unique challenge of managing devices in a BYOD-rooted culture with a standardized Linux/Mac infrastructure. The post also discusses the complexities of managing sprawling infrastructure with SSH access and the lack of two-factor authentication enforcement for SSH. Wins include the implementation of Okta for user identity management, which significantly reduced provisioning times, and the use of Chef/Knife for infrastructure changes. The team is exploring Okta's Advanced Server Access (ASA) to integrate SSH accounts and enforce multi-factor authentication, GeoIP, and other security measures for server administration.