Setting up a reverse proxy on IIS (Internet Information Services) allows us to take advantage of windows authentication.
This means we can limit access to a streamlit app to a specific Active Directory group, Local group or list of Active Directory users.
(I haven't tested https support yet).