Reference documentation and code samples for the Cloud Identity-Aware Proxy v1 API enum AttributePropagationSettings.Types.OutputCredentials.
Supported output credentials for attribute propagation. Each output
credential maps to a "field" in the response. For example, selecting JWT
will propagate all attributes in the IAP JWT, header in the headers, etc.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThis page provides documentation for the \u003ccode\u003eAttributePropagationSettings.Types.OutputCredentials\u003c/code\u003e enum within the Google Cloud IAP v1 API, detailing various supported output credential types.\u003c/p\u003e\n"],["\u003cp\u003eThe latest version of the API documented is 2.7.0, with version 2.6.0 being the current version highlighted on this specific webpage, and versions ranging down to 1.0.0 are also accessible.\u003c/p\u003e\n"],["\u003cp\u003eThe enum defines four output credential options: \u003ccode\u003eHeader\u003c/code\u003e, \u003ccode\u003eJwt\u003c/code\u003e, \u003ccode\u003eRctoken\u003c/code\u003e, and \u003ccode\u003eUnspecified\u003c/code\u003e, each of which designates how attributes will be propagated, such as through headers or within JWT/RCToken claims.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eHeader\u003c/code\u003e option will propagate attributes in headers prefixed with "x-goog-iap-attr-", while \u003ccode\u003eJwt\u003c/code\u003e and \u003ccode\u003eRctoken\u003c/code\u003e propagate attributes within the JWT or RCToken using the \u003ccode\u003e"additional_claims"\u003c/code\u003e format.\u003c/p\u003e\n"]]],[],null,[]]
