Skip to main content
Google Cloud Documentation
Technology areas
  • AI and ML
  • Application development
  • Application hosting
  • Compute
  • Data analytics and pipelines
  • Databases
  • Distributed, hybrid, and multicloud
  • Industry solutions
  • Migration
  • Networking
  • Observability and monitoring
  • Security
  • Storage
Cross-product tools
  • Access and resources management
  • Costs and usage management
  • Infrastructure as code
  • SDK, languages, frameworks, and tools
/
Console
  • English
  • Deutsch
  • Español
  • Español – América Latina
  • Français
  • Indonesia
  • Italiano
  • Português
  • Português – Brasil
  • עברית
  • 中文 – 简体
  • 中文 – 繁體
  • 日本語
  • 한국어
Sign in
  • Identity-Aware Proxy
Start free
Overview Guides Reference Samples Support Resources
Google Cloud Documentation
  • Technology areas
    • More
    • Overview
    • Guides
    • Reference
    • Samples
    • Support
    • Resources
  • Cross-product tools
    • More
  • Console
  • Identity-Aware Proxy
  • Product overview
  • Cloud IAP conceptual overview
  • Quickstarts
  • All quickstarts
  • Manage access with Google Accounts
  • Manage access with external identities
  • Set up Cloud IAP for Compute Engine
  • How-to guides
  • All how-to guides
  • Enable IAP
    • Enable Cloud IAP
      • Enabling Cloud IAP for App Engine
      • Enable Cloud IAP for Cloud Run
      • Enabling Cloud IAP for Compute Engine
      • Enabling Cloud IAP for Kubernetes Engine
      • Enabling Cloud IAP for on-premises apps
      • Use custom OAuth clients with IAP
      • IAP for agents overview
    • Manage user access
    • Get the user's identity
    • Use authorization policies
    • Restrict access to specific domains
    • Set up context-aware access
  • Session management
    • Manage sessions
    • Configure reauthentication
  • Google identities
    • Set up programmatic authentication
    • Customize OAuth configuration
    • Share OAuth clients
    • Use programmatic OAuth clients
    • Enable IAP using a Google-managed OAuth client
    • Configure SAML attribute propagation
  • External identities (Identity Platform)
    • Enable external identities
    • Use service accounts with external identities
    • Access non-Google resources programmatically
    • Manage external identity sessions
    • Sign-in pages
      • Create a sign-in page with FirebaseUI
      • Create a custom sign-in page
      • Host a sign-in page with Cloud Run
  • Workforce Identity Federation
    • Configure IAP with Workforce Identity Federation
    • Manage IAP sessions for Workforce Identity Federation
  • IAP for TCP
    • Use IAP for TCP forwarding
    • Use TCP forwarding with IP addresses or hostnames
    • Secure TCP forwarding with VPC Service Controls
  • Security and governance
    • Enable Cloud Audit Logging
    • Secure your app with signed headers
    • Use organization policies for IAP enablement
    • Use custom organization policies
  • Customization and advanced use cases
    • Advanced IAP customization
    • Use query parameters and headers
    • Set up an external HTTPS load balancer
    • Use IAP as an authentication proxy
    • Integrate IAP with Anthos Service Mesh
  • Concepts
  • All concepts
  • Cloud IAP conceptual overview
  • Cloud IAP for on-premises apps
  • External identities
  • TCP forwarding
  • Best practices
  • AI and ML
  • Application development
  • Application hosting
  • Compute
  • Data analytics and pipelines
  • Databases
  • Distributed, hybrid, and multicloud
  • Industry solutions
  • Migration
  • Networking
  • Observability and monitoring
  • Security
  • Storage
  • Access and resources management
  • Costs and usage management
  • Infrastructure as code
  • SDK, languages, frameworks, and tools
  • Home
  • Documentation
  • Security
  • Identity-Aware Proxy
  • Guides

Configure SAML attribute propagation