To simplify access controls across internal networks

To restrict external users from accessing internal resources

To assume no inherent trust between users, devices, or network components

To eliminate authentication for trusted users