Custom content configuration for access denied page.
IAP allows customers to define a custom URI to use as the error
page when access is denied to users. If IAP prevents access to
this page, the default IAP error page will be displayed instead.
Configuration for RCToken generated for service mesh
workloads protected by IAP. RCToken are IAP generated JWTs that
can be verified at the application. The RCToken is primarily
used for service mesh deployments, and can be scoped to a single
mesh by configuring the audience field accordingly.
WorkforceIdentitySettings allows customers to configure
workforce pools and OAuth 2.0 settings to gate their
applications using a third-party IdP with access control.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[],[],null,["# Package types (1.17.1)\n\nVersion latestkeyboard_arrow_down\n\n- [1.17.1 (latest)](/python/docs/reference/iap/latest/google.cloud.iap_v1.types)\n- [1.17.0](/python/docs/reference/iap/1.17.0/google.cloud.iap_v1.types)\n- [1.16.1](/python/docs/reference/iap/1.16.1/google.cloud.iap_v1.types)\n- [1.15.0](/python/docs/reference/iap/1.15.0/google.cloud.iap_v1.types)\n- [1.14.1](/python/docs/reference/iap/1.14.1/google.cloud.iap_v1.types)\n- [1.13.5](/python/docs/reference/iap/1.13.5/google.cloud.iap_v1.types)\n- [1.12.0](/python/docs/reference/iap/1.12.0/google.cloud.iap_v1.types)\n- [1.10.3](/python/docs/reference/iap/1.10.3/google.cloud.iap_v1.types)\n- [1.9.0](/python/docs/reference/iap/1.9.0/google.cloud.iap_v1.types)\n- [1.8.1](/python/docs/reference/iap/1.8.1/google.cloud.iap_v1.types)\n- [1.7.0](/python/docs/reference/iap/1.7.0/google.cloud.iap_v1.types)\n- [1.6.0](/python/docs/reference/iap/1.6.0/google.cloud.iap_v1.types)\n- [1.5.4](/python/docs/reference/iap/1.5.4/google.cloud.iap_v1.types)\n- [1.4.1](/python/docs/reference/iap/1.4.1/google.cloud.iap_v1.types)\n- [1.3.1](/python/docs/reference/iap/1.3.1/google.cloud.iap_v1.types)\n- [1.2.1](/python/docs/reference/iap/1.2.1/google.cloud.iap_v1.types)\n- [1.1.0](/python/docs/reference/iap/1.1.0/google.cloud.iap_v1.types)\n- [1.0.2](/python/docs/reference/iap/1.0.2/google.cloud.iap_v1.types)\n- [0.1.2](/python/docs/reference/iap/0.1.2/google.cloud.iap_v1.types) \nAPI documentation for `iap_v1.types` package. \n\nClasses\n-------\n\n### [AccessDeniedPageSettings](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.AccessDeniedPageSettings)\n\nCustom content configuration for access denied page.\nIAP allows customers to define a custom URI to use as the error\npage when access is denied to users. If IAP prevents access to\nthis page, the default IAP error page will be displayed instead.\n\n.. _oneof: \u003chttps://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields\u003e\n\n### [AccessSettings](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.AccessSettings)\n\nAccess related settings for IAP protected apps.\n\n### [AllowedDomainsSettings](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.AllowedDomainsSettings)\n\nConfiguration for IAP allowed domains. Lets you to restrict\naccess to an app and allow access to only the domains that you\nlist.\n\n.. _oneof: \u003chttps://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields\u003e\n\n### [ApplicationSettings](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.ApplicationSettings)\n\nWrapper over application specific settings for IAP.\n\n### [AttributePropagationSettings](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.AttributePropagationSettings)\n\nConfiguration for propagating attributes to applications\nprotected by IAP.\n\n.. _oneof: \u003chttps://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields\u003e\n\n### [Brand](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.Brand)\n\nOAuth brand data.\nNOTE: Only contains a portion of the data that describes a\nbrand.\n\n### [CorsSettings](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.CorsSettings)\n\nAllows customers to configure HTTP request paths that'll allow HTTP\n`OPTIONS` call to bypass authentication and authorization.\n\n### [CreateBrandRequest](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.CreateBrandRequest)\n\nThe request sent to CreateBrand.\n\n### [CreateIdentityAwareProxyClientRequest](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.CreateIdentityAwareProxyClientRequest)\n\nThe request sent to CreateIdentityAwareProxyClient.\n\n### [CreateTunnelDestGroupRequest](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.CreateTunnelDestGroupRequest)\n\nThe request to CreateTunnelDestGroup.\n\n### [CsmSettings](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.CsmSettings)\n\nConfiguration for RCToken generated for service mesh\nworkloads protected by IAP. RCToken are IAP generated JWTs that\ncan be verified at the application. The RCToken is primarily\nused for service mesh deployments, and can be scoped to a single\nmesh by configuring the audience field accordingly.\n\n### [DeleteIdentityAwareProxyClientRequest](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.DeleteIdentityAwareProxyClientRequest)\n\nThe request sent to DeleteIdentityAwareProxyClient.\n\n### [DeleteTunnelDestGroupRequest](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.DeleteTunnelDestGroupRequest)\n\nThe request to DeleteTunnelDestGroup.\n\n### [GcipSettings](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.GcipSettings)\n\nAllows customers to configure tenant IDs for a Cloud Identity\nPlatform (GCIP) instance for each application.\n\n### [GetBrandRequest](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.GetBrandRequest)\n\nThe request sent to GetBrand.\n\n### [GetIapSettingsRequest](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.GetIapSettingsRequest)\n\nThe request sent to GetIapSettings.\n\n### [GetIdentityAwareProxyClientRequest](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.GetIdentityAwareProxyClientRequest)\n\nThe request sent to GetIdentityAwareProxyClient.\n\n### [GetTunnelDestGroupRequest](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.GetTunnelDestGroupRequest)\n\nThe request to GetTunnelDestGroup.\n\n### [IapSettings](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.IapSettings)\n\nThe IAP configurable settings.\n\n### [IdentityAwareProxyClient](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.IdentityAwareProxyClient)\n\nContains the data that describes an Identity Aware Proxy\nowned client.\n\n### [ListBrandsRequest](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.ListBrandsRequest)\n\nThe request sent to ListBrands.\n\n### [ListBrandsResponse](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.ListBrandsResponse)\n\nResponse message for ListBrands.\n\n### [ListIdentityAwareProxyClientsRequest](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.ListIdentityAwareProxyClientsRequest)\n\nThe request sent to ListIdentityAwareProxyClients.\n\n### [ListIdentityAwareProxyClientsResponse](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.ListIdentityAwareProxyClientsResponse)\n\nResponse message for ListIdentityAwareProxyClients.\n\n### [ListTunnelDestGroupsRequest](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.ListTunnelDestGroupsRequest)\n\nThe request to ListTunnelDestGroups.\n\n### [ListTunnelDestGroupsResponse](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.ListTunnelDestGroupsResponse)\n\nThe response from ListTunnelDestGroups.\n\n### [OAuth2](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.OAuth2)\n\nThe OAuth 2.0 Settings\n\n### [OAuthSettings](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.OAuthSettings)\n\nConfiguration for OAuth login\\&consent flow behavior as well\nas for OAuth Credentials.\n\n### [ReauthSettings](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.ReauthSettings)\n\nConfiguration for IAP reauthentication policies.\n\n### [ResetIdentityAwareProxyClientSecretRequest](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.ResetIdentityAwareProxyClientSecretRequest)\n\nThe request sent to ResetIdentityAwareProxyClientSecret.\n\n### [TunnelDestGroup](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.TunnelDestGroup)\n\nA TunnelDestGroup.\n\n### [UpdateIapSettingsRequest](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.UpdateIapSettingsRequest)\n\nThe request sent to UpdateIapSettings.\n\n### [UpdateTunnelDestGroupRequest](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.UpdateTunnelDestGroupRequest)\n\nThe request to UpdateTunnelDestGroup.\n\n### [ValidateIapAttributeExpressionRequest](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.ValidateIapAttributeExpressionRequest)\n\nRequest sent to IAP Expression Linter endpoint.\n\n### [ValidateIapAttributeExpressionResponse](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.ValidateIapAttributeExpressionResponse)\n\nIAP Expression Linter endpoint returns empty response body.\n\n### [WorkforceIdentitySettings](/python/docs/reference/iap/latest/google.cloud.iap_v1.types.WorkforceIdentitySettings)\n\nWorkforceIdentitySettings allows customers to configure\nworkforce pools and OAuth 2.0 settings to gate their\napplications using a third-party IdP with access control."]]
