What is the timeline to use on-premise AD as the Identity Provider (IDP)?

Hi. You should be able to use on-prem AD for authentication in EAP1 as well, provided these user groups are synced with Azure AD. Microsoft provides an option to sync these users from on-prem AD to Azure. Once that is done, you should be able to authenticate these users when they try to access resources that are behind a ZTNA gateway. Regarding EAP2, we are targeting a public launch in the September timeframe. 

We currently use AWS, not Azure. Is there a way to only use on-prem AD without Azure? 

Unfortunately, No. As of now Azure AD is one of the pre-requisites. But, we do intend to  cover more platforms in the subsequent releases. 

Ok, thank you for the update! If things change, we will love to try it!