Google Workspace has introduced new security measures, including an extra layer of protection called “Verify it’s you,” specifically designed for sensitive actions within Gmail.
These sensitive actions in Gmail can be categorized into three groups:
1. Filters: Creating, editing, or importing new filters.
2. Forwarding: Adding a new forwarding address in Forwarding and POP/IMAP settings.
3. IMAP Access: Enabling IMAP access status from settings.
These actions, if exploited, could potentially allow unauthorized access to emails. To counter this risk, Google will assess the session attempting such actions. If the session is deemed risky, a “Verify it’s you” prompt will be triggered. Users will need to confirm their identity by using 2-Step Verification (2SV) or another trusted-factor method.
If the verification process fails or is not completed, the user will receive a “Critical security alert” on their trusted devices, which will help thwart the unauthorized attempt and secure the account.
The “Verify it’s you” feature will be available for all personal Google Accounts and Workspace customers. For Workspace customers, Google must be the identity provider, and SAML is not supported at the moment. The rollout started on August 23, 2023, for Rapid Release domains, with feature visibility gradually appearing over 15 days. For Scheduled Release domains, the full rollout will begin on September 6, 2023, with feature visibility in 1-3 days.
