Okta (scale-ft) at work, evaluated gravitational teleport in the past. In the past (company with <1000 employees), I set up nss-cache and a saltstack system on

Okta (scale-ft) at work, evaluated gravitational teleport in the past. In the past (company with <1000 employees), I set up nss-cache and a saltstack system on a timer to regularly deploy new keys from LDAP (we used bastion hosts to control for any dangers of config drift and I wanted zero SPOFs during steady state). I would say this is the least likely to fail under all scenarios and is therefore the best choice unless it is somehow untenable (large number of employees, or extremely dynamic user creation/deletion)