Proxy front end with SSO?

Anybody hide their HA instance behind a proxy that’s able to do pass-thru authentication? I’m thinking home assistant just uses 401/FBA, so you should be able to hide it behind a netscaler or similar.

Just wondering if anyone has done this, what you used, and what the results were?