diff --git a/proto/kms/api/cmk/sessionmanager/session/v1/session.pb.go b/proto/kms/api/cmk/sessionmanager/session/v1/session.pb.go
index 6fab47a..01c4031 100644
--- a/proto/kms/api/cmk/sessionmanager/session/v1/session.pb.go
+++ b/proto/kms/api/cmk/sessionmanager/session/v1/session.pb.go
@@ -23,10 +23,11 @@ const (
 )
 
 type GetSessionRequest struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	SessionId     string                 `protobuf:"bytes,1,opt,name=session_id,json=sessionId,proto3" json:"session_id,omitempty"`
-	TenantId      string                 `protobuf:"bytes,2,opt,name=tenant_id,json=tenantId,proto3" json:"tenant_id,omitempty"`
-	Fingerprint   string                 `protobuf:"bytes,3,opt,name=fingerprint,proto3" json:"fingerprint,omitempty"`
+	state     protoimpl.MessageState `protogen:"open.v1"`
+	SessionId string                 `protobuf:"bytes,1,opt,name=session_id,json=sessionId,proto3" json:"session_id,omitempty"`
+	TenantId  string                 `protobuf:"bytes,2,opt,name=tenant_id,json=tenantId,proto3" json:"tenant_id,omitempty"`
+	// Deprecated: Marked as deprecated in kms/api/cmk/sessionmanager/session/v1/session.proto.
+	Fingerprint   string `protobuf:"bytes,3,opt,name=fingerprint,proto3" json:"fingerprint,omitempty"`
 	unknownFields protoimpl.UnknownFields
 	sizeCache     protoimpl.SizeCache
 }
@@ -75,6 +76,7 @@ func (x *GetSessionRequest) GetTenantId() string {
 	return ""
 }
 
+// Deprecated: Marked as deprecated in kms/api/cmk/sessionmanager/session/v1/session.proto.
 func (x *GetSessionRequest) GetFingerprint() string {
 	if x != nil {
 		return x.Fingerprint
diff --git a/proto/kms/api/cmk/sessionmanager/session/v1/session.proto b/proto/kms/api/cmk/sessionmanager/session/v1/session.proto
index 57bbbb1..2a7a499 100644
--- a/proto/kms/api/cmk/sessionmanager/session/v1/session.proto
+++ b/proto/kms/api/cmk/sessionmanager/session/v1/session.proto
@@ -7,7 +7,7 @@ import "kms/api/cmk/types/v1/oidc.proto";
 option go_package = "github.com/openkcm/api-sdk/proto/kms/api/cmk/sessionmanager/session/v1;sessionv1";
 
 service Service {
-  // GetSession matches the fingerprint, tenant id, and returns a session
+  // GetSession validates the session and tenant, and returns the session
   // and its status. Additionally, the method checks whether the tenant is blocked.
   //
   // The method may return the following statuses with a rich error description (see kms.api.cmk.rpc.v1 package):
@@ -22,7 +22,8 @@ service Service {
 message GetSessionRequest {
   string session_id = 1;
   string tenant_id = 2;
-  string fingerprint = 3;
+  // Deprecated: fingerprint is no longer used for session validation.
+  string fingerprint = 3 [deprecated = true];
 }
 
 message GetSessionResponse {
diff --git a/proto/kms/api/cmk/sessionmanager/session/v1/session_grpc.pb.go b/proto/kms/api/cmk/sessionmanager/session/v1/session_grpc.pb.go
index 95f414e..69cf2ba 100644
--- a/proto/kms/api/cmk/sessionmanager/session/v1/session_grpc.pb.go
+++ b/proto/kms/api/cmk/sessionmanager/session/v1/session_grpc.pb.go
@@ -27,7 +27,7 @@ const (
 //
 // For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
 type ServiceClient interface {
-	// GetSession matches the fingerprint, tenant id, and returns a session
+	// GetSession validates the session and tenant, and returns the session
 	// and its status. Additionally, the method checks whether the tenant is blocked.
 	//
 	// The method may return the following statuses with a rich error description (see kms.api.cmk.rpc.v1 package):
@@ -72,7 +72,7 @@ func (c *serviceClient) GetOIDCProvider(ctx context.Context, in *GetOIDCProvider
 // All implementations must embed UnimplementedServiceServer
 // for forward compatibility.
 type ServiceServer interface {
-	// GetSession matches the fingerprint, tenant id, and returns a session
+	// GetSession validates the session and tenant, and returns the session
 	// and its status. Additionally, the method checks whether the tenant is blocked.
 	//
 	// The method may return the following statuses with a rich error description (see kms.api.cmk.rpc.v1 package):