diff --git a/services/tunnelbroker/src/identity/mod.rs b/services/tunnelbroker/src/identity/mod.rs
--- a/services/tunnelbroker/src/identity/mod.rs
+++ b/services/tunnelbroker/src/identity/mod.rs
@@ -1,4 +1,5 @@
 use client_proto::VerifyUserAccessTokenRequest;
+use comm_lib::auth::is_csat_verification_disabled;
 use grpc_clients::identity::{self, PlatformMetadata};
 use grpc_clients::tonic::Request;
 use identity::get_unauthenticated_client;
@@ -19,6 +20,10 @@
   device_id: &str,
   access_token: &str,
 ) -> Result<bool, Error> {
+  if is_csat_verification_disabled() {
+    return Ok(true);
+  }
+
   let mut grpc_client = get_unauthenticated_client(
     &CONFIG.identity_endpoint,
     PlatformMetadata::new(PLACEHOLDER_CODE_VERSION, DEVICE_TYPE),