If you're a Microsoft shop, you can put just about anything behind Microsoft Entra Application Proxy (and also support SSO).

https://learn.microsoft.com/en-us/entra/identity/app-proxy/o...