Administrators may observe an "Allow Cookie Validation request" event in Google Cloud logs. This event appears without a corresponding active sign-in attempt by the user.
- Google Workspace
- Persistent cookies
This event occurs because Google Workspace validates an existing session cookie rather than processing a new login attempt. When persistent session cookies are enabled in the Global Session Policy, and the user selects Keep me signed in, the session is maintained across browser restarts. Google Workspace (the Service Provider) periodically validates the existing session through Okta (the Identity Provider) to confirm the session is valid.
This event indicates normal session management behavior. The session remains active until the session expires according to the Global Session Policy or the user signs out.
To review or adjust the configuration:
-
In the Admin Console, go to Security > Global Session Policy.
-
Review the Persist session cookies across browser sessions setting.
