A client I work with uses Appgate SDP which uses SPA to do exactly that. I haven’t seen SPA come up often other than that.

For this particular client it was a hard requirement for them to even consider allowing access from public internet.