Repository files navigation

IAP Desktop is a Remote Desktop and SSH client that lets you connect to your Google Cloud VM instances from anywhere.

IAP Desktop usesIdentity-Aware-Proxy (IAP) to connect to VM instances so that you can:

• Connect to VM instances that don’t have a public IP address
• Connect from anywhere over the internet

Together, IAP Desktop andIdentity-Aware-Proxy (IAP) let you apply zero-trust security to your VMs:

• Apply fine-grained access controls that definewho can access which VM
• Useaccess levels to restrict access by time or location
• UseBeycondCorp Enterprise to limit access to trusted devices

The application automatically manages IAP TCP tunnels for you, and protects them so that no other users or programs can access them.

IAP Desktop is afull-featured Remote Desktop client that lets you:

• Use multiple Remote Desktop sessions at the same time
• Switch between full-screen and tabbed Remote Desktop sessions
• Upload and download files over SFTP

To help you authenticate to Windows VMs, IAP Desktop can:

• Automatically generate Windows credentials by using the Compute Engine guest agent environment
• Encrypt and store your Windows credentials locally

▶️Show screencast

IAP Desktopincludes an SSH client and terminal so that you can:

• Use multiple SSH sessions in parallel, and switch between them using tabs
• Upload and download files using SFTP

To help you authenticate to Linux VMs, IAP Desktop can:

• Automatically create and publish SSH keys toOS Login ormetadata
• Use OS Login2-factor authentication
• Store our SSH keys locally using Windows CNG

▶️Show screencast

IAP Desktop gives you a consolidated view of your VMs and lets you:

• Connect to VMs across multiple projects and Google Cloud organizations
• View diagnostics informationsuch as logs and serial port output
• Remotely join a VM to Active Directory
• Perform other common operations such as starting or stopping VMs

▶️Show screencast

You can use IAP Desktop to let client applications connect to your Google Cloud VMs through IAP:Right-click a VM, select the application to launch, and IAP Desktop automatically connects theapplication through an IAP TCP forwarding tunnel.

Supported client applications include:

• SQL Server Management Studio (supporting Windows authentication and SQL Server authentication)
• MySQL Shell
• Chrome (to connect to management portals and other internal websites)
• Custom applications

• Install IAP Desktop
• Configure IAP in your project
• Connect to a Windows VM
• Connect to a Linux VM
• Connect to SQL Server
• Connect to VMs from within a web browser

• Instance properties
• Event log
• Serial port output

• Create profiles

• Use group policies
• Troubleshoot common issues

IAP Desktop is an open-source project developed and maintained by the Google Cloud Solutions Architects team. The project is not an officially supported Google product.

All files in this repository are under theApache License, Version 2.0 unless noted otherwise.