A 2 AM password rotation can fail an overnight pre-stage pass

A pre-stage pass kicks off at midnight using the source tenant endpoint. A scheduled password rotation runs at 2 AM. By 2:01, every active job tied to that endpoint is throwing authentication failures, and by 6 AM hundreds of accounts can show zero items migrated for the night.

BitTitan endpoints keep the credentials that were entered when the endpoint was configured. Once the service account password changes, the saved credential is invalid, and any job that runs afterward fails authentication on its first API call.

To rotate safely during an active migration:

  • Align password changes with the migration schedule
  • Update the BitTitan endpoint credential right after the password changes, and confirm the endpoint works before jobs resume
  • Avoid rotating within 24 hours of a scheduled pre-stage pass or during the cutover maintenance window

Put the rotation schedule and the endpoint update procedure in the migration runbook so the security team and the migration team coordinate timing.

Does your password rotation schedule account for active MigrationWiz jobs?

#BitTitan #MigrationWiz