topic Re: Youtube - Account verification when scheduling an event in Peer-Peer Topics

Youtube - Account verification when scheduling an event

alexgrutza — Tue, 05 Nov 2024 19:14:37 GMT

We have a user who is getting a "verify account" when trying to schedule a youtube event. They're logged into the youtube account already as the account, but when they go to create a scheduled event, it prompts them to verify the number they see on screen, with the popup on another device (probably the "Google Prompt on other device"). They don't have the other device, someone else does (it's an organization account).

They think something changed, which I don't think anything has changed to my knowledge and this KB article says it may prompt for verification on certain tasks within youtube https://support.google.com/youtube/answer/9846719?hl=en&co=GENIE.Platform%3DiOS&sjid=9450933874553864714-NC so I'm wondering if that is the issue they're experiencing.

Anyone else having this issue?

Re: Youtube - Account verification when scheduling an event

Kim_Nilsson — Wed, 06 Nov 2024 09:37:19 GMT

Did you not add the user's own account as an editor to the YouTube channel?

Having several users log into the same account goes against the Acceptable Use Policy (for Workspace, but I would assume also for YouTube), and all security think I can imagine.

Re: Youtube - Account verification when scheduling an event

Kim_Nilsson — Wed, 06 Nov 2024 09:39:48 GMT

To answer your question, YES, "strange logins" (from new places, on new hardware) should trigger a Login Challenge, and there is a button on the user card in admin console to disable it for 10 minutes. If the account has proper 2FA, then the Login Challenge is almost always a proper 2FA request.

Re: Youtube - Account verification when scheduling an event

alexgrutza — Wed, 06 Nov 2024 14:14:24 GMT

The interesting thing is the person was logged into Youtube as the account already, it's only when they went to schedule a future event in Youtube is when it prompted them. So it wasn't a new device as they were already logged in. MFA is not enabled for the account either (just checked).