diff --git a/notification-service/notification-web/src/main/resources/config/cors.yml b/notification-service/notification-web/src/main/resources/config/cors.yml
index 3774f14d4..dfb579eb1 100644
--- a/notification-service/notification-web/src/main/resources/config/cors.yml
+++ b/notification-service/notification-web/src/main/resources/config/cors.yml
@@ -4,4 +4,4 @@ web:
     allowed-methods: [ HEAD, GET, POST, PUT, DELETE, PATCH ]
     allowed-headers: [ Authorization, Cache-Control, Content-Type, Content-Disposition, x-tenant ]
     exposed-headers: [ Authorization, Cache-Control, Content-Type, Content-Disposition ]
-    allow-credentials: false
+    #allow-credentials: false