Identity-Aware Proxy (IAP) allows you to manage access to HTTP-based apps outside of Google Cloud. This includes apps on-premises in your enterprise's data centers. To learn how to secure on-premises apps with IAP, see Setting up IAP for on-premises apps.