diff --git a/dotnet-authserver/src/TeacherIdentity.AuthServer/State/DbAuthenticationStateProvider.cs b/dotnet-authserver/src/TeacherIdentity.AuthServer/State/DbAuthenticationStateProvider.cs
index 191bd0e5d..ee2637455 100644
--- a/dotnet-authserver/src/TeacherIdentity.AuthServer/State/DbAuthenticationStateProvider.cs
+++ b/dotnet-authserver/src/TeacherIdentity.AuthServer/State/DbAuthenticationStateProvider.cs
@@ -58,7 +58,7 @@ public DbAuthenticationStateProvider(
                 using var suppressScope = SentryErrors.Suppress(IsPostgresSerializationError);
 
                 var dbAuthState = await _dbContext.AuthenticationStates.FromSqlInterpolated(
-                        $"select * from authentication_states where journey_id = {journeyId}")
+                        $"select * from authentication_states where journey_id = {journeyId} for update")
                     .SingleOrDefaultAsync();
 
                 if (dbAuthState is not null)