diff --git a/src/core/lib/security/credentials/google_default/google_default_credentials.cc b/src/core/lib/security/credentials/google_default/google_default_credentials.cc
index 5ad3e4b38b5..34ded0b8c82 100644
--- a/src/core/lib/security/credentials/google_default/google_default_credentials.cc
+++ b/src/core/lib/security/credentials/google_default/google_default_credentials.cc
@@ -93,7 +93,8 @@ bool IsXdsNonCfeCluster(const char* xds_cluster) {
   if (!absl::StartsWith(xds_cluster, "xdstp:")) return true;
   auto uri = grpc_core::URI::Parse(xds_cluster);
   if (!uri.ok()) return true;  // Shouldn't happen, but assume ALTS.
-  return !absl::StartsWith(uri->path(),
+  return uri->authority() != "traffic-director-c2p.xds.googleapis.com" ||
+         !absl::StartsWith(uri->path(),
                            "/envoy.config.cluster.v3.Cluster/google_cfe_");
 }