diff --git a/cmd/coordinator/coordinator.go b/cmd/coordinator/coordinator.go
index f4b9c5e..661befb 100644
--- a/cmd/coordinator/coordinator.go
+++ b/cmd/coordinator/coordinator.go
@@ -346,8 +346,8 @@
 		if serviceID = env.IAPServiceID(coordinatorBackend); serviceID == "" {
 			log.Fatalf("unable to retrieve Service ID for backend service=%q", coordinatorBackend)
 		}
-		opts = append(opts, grpc.UnaryInterceptor(access.RequireIAPAuthUnaryInterceptor(access.IAPAudienceGCE(env.ProjectNumber, serviceID))))
-		opts = append(opts, grpc.StreamInterceptor(access.RequireIAPAuthStreamInterceptor(access.IAPAudienceGCE(env.ProjectNumber, serviceID))))
+		opts = append(opts, grpc.UnaryInterceptor(access.RequireIAPAuthUnaryInterceptor(access.IAPSkipAudienceValidation)))
+		opts = append(opts, grpc.StreamInterceptor(access.RequireIAPAuthStreamInterceptor(access.IAPSkipAudienceValidation)))
 	}
 	// grpcServer is a shared gRPC server. It is global, as it needs to be used in places that aren't factored otherwise.
 	grpcServer := grpc.NewServer(opts...)
diff --git a/internal/access/access.go b/internal/access/access.go
index 6342cbd..197dafa 100644
--- a/internal/access/access.go
+++ b/internal/access/access.go
@@ -29,6 +29,10 @@
 	iapHeaderEmail = "X-Goog-Authenticated-User-Email"
 	// iapHeaderID is the header IAP stores the user id in.
 	iapHeaderID = "X-Goog-Authenticated-User-Id"
+
+	// IAPSkipAudienceValidation is the audience string used when the validation is not
+	// necessary. https://pkg.go.dev/google.golang.org/api/idtoken#Validate
+	IAPSkipAudienceValidation = ""
 )
 
 // IAPFields contains the values for the headers retrieved from Identity Aware