diff --git a/internal/proxy/proxy.go b/internal/proxy/proxy.go
index 0b023df3f..ff58c552a 100644
--- a/internal/proxy/proxy.go
+++ b/internal/proxy/proxy.go
@@ -342,6 +342,9 @@ func credentialsOpt(c Config, l cloudsql.Logger) (cloudsqlconn.Option, error) {
 	// credentials token source.
 	if c.ImpersonationChain != "" {
 		var iopts []option.ClientOption
+		if c.UniverseDomain != "" {
+			iopts = append(iopts, option.WithUniverseDomain(c.UniverseDomain))
+		}
 		switch {
 		case c.Token != "":
 			l.Infof("Impersonating service account with OAuth2 token")