--- title: Enterprise Secrets Management: How to Solve Credential... description: A breakdown of why secrets management breaks down at enterprise scale, covering failure modes like rotations that cause production outages, ownerless secrets,... canonical: https://daily.dev/posts/enterprise-secrets-management-how-to-solve-credential-problems-at-scale-bjlummnks twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Enterprise Secrets Management: How to Solve Credential Problems at Scale | daily.dev og:description: A breakdown of why secrets management breaks down at enterprise scale, covering failure modes like rotations that cause production outages, ownerless secrets,... og:url: https://daily.dev/posts/enterprise-secrets-management-how-to-solve-credential-problems-at-scale-bjlummnks og:image: https://api.daily.dev/og/posts/BjLUMmnkS.png og:image:alt: Enterprise Secrets Management: How to Solve Credential Problems at Scale og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Enterprise Secrets Management: How to Solve Credential Problems at Scale **[Infisical](https://daily.dev/sources/infisical)** · 14 min read · 3 upvotes · 0 comments ## Summary A breakdown of why secrets management breaks down at enterprise scale, covering failure modes like rotations that cause production outages, ownerless secrets, store sprawl across clouds and acquisitions, ticket-queue bottlenecks, permission drift during reorgs, shared CI service accounts, and incident response gaps. Real incidents are cited, including Microsoft's paused signing key rotation and Cloudflare's Okta-breach aftermath. The piece outlines structural fixes (per-workload identities, automated rotation, scoped roles, SCIM-synced groups, audit streaming) and a five-step migration plan, closing with how Infisical's platform addresses each failure mode. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### why did Microsoft stop rotating its consumer signing keys and what happened as a result Microsoft paused rotating its consumer signing keys in 2021 following an outage linked to its manual rotation process. A 2016-issued key remained valid as a result, and a hacker group used that still-valid key to forge authentication tokens in an intrusion discovered in 2023, according to the US Cyber Safety Review Board's review. _Teams wary of rotation-induced outages can follow ongoing secrets management practices on daily.dev._ ### what service accounts did Cloudflare miss rotating after the Okta breach Cloudflare's postmortem on its Thanksgiving 2023 security incident found that one service token and three service accounts, out of thousands, were not rotated after the Okta breach because they were mistakenly believed to be unused. An attacker used those credentials to reach Cloudflare's Atlassian systems. _Engineers hardening credential hygiene after third-party breaches can follow similar incident writeups on daily.dev._ ### how many separate secret vaults did Uber have before consolidating its secrets management Uber's engineering team found 25 separate vaults owned by different teams before consolidating them into six as part of building a multi-cloud secrets management platform, illustrating how secret store sprawl accumulates across teams and clouds at large organizations. _Anyone consolidating sprawling secret stores can track similar infrastructure case studies on daily.dev._ ## Similar posts on daily.dev - [Secrets Management Failures in CI/CD Pipelines](https://daily.dev/posts/secrets-management-failures-in-ci-cd-pipelines-gzmellboh) · DevOps.com · 0 upvotes · 0 comments - [Why Organizations Are Abandoning Static Secrets for Managed Identities](https://daily.dev/posts/why-organizations-are-abandoning-static-secrets-for-managed-identities-l5n3swmh4) · The Hacker News · 0 upvotes · 0 comments - [Is your Secrets Management solution scalable](https://daily.dev/posts/is-your-secrets-management-solution-scalable-8ooqo1lpz) · Security Boulevard · 0 upvotes · 0 comments - [Why short-lived systems need stronger identity governance](https://daily.dev/posts/why-short-lived-systems-need-stronger-identity-governance-2mp3kjrvi) · CSO Online · 0 upvotes · 0 comments - [Solving secret sprawl in multi-account Kubernetes with External Secrets Operator](https://daily.dev/posts/solving-secret-sprawl-in-multi-account-kubernetes-with-external-secrets-operator-z5vx9tlzl) · CNCF · 0 upvotes · 0 comments --- Tags: [#kubernetes](https://daily.dev/tags/kubernetes), [#compliance](https://daily.dev/tags/compliance), [#secrets-management](https://daily.dev/tags/secrets-management) [View this post on daily.dev](https://daily.dev/posts/enterprise-secrets-management-how-to-solve-credential-problems-at-scale-bjlummnks) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Enterprise Secrets Management: How to Solve Credential Problems at Scale","url":"https://daily.dev/posts/enterprise-secrets-management-how-to-solve-credential-problems-at-scale-bjlummnks","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/enterprise-secrets-management-how-to-solve-credential-problems-at-scale-bjlummnks"},"datePublished":"2026-10-04T06:43:24.083Z","dateModified":"2026-10-04T06:43:57.492Z","description":"A breakdown of why secrets management breaks down at enterprise scale, covering failure modes like rotations that cause production outages, ownerless secrets,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/18b0a75792270f757d7a26adeb71bc49?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/18b0a75792270f757d7a26adeb71bc49?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Infisical","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Infisical","logo":"https://media.daily.dev/image/upload/s--cBUOmyKi--/f_auto/v1791096186/squads/35883724-c141-4779-850e-50db106017fd?_a=BAMAMicg0","url":"https://daily.dev/squads/infisical"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/enterprise-secrets-management-how-to-solve-credential-problems-at-scale-bjlummnks","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":3},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"kubernetes,compliance,secrets-management","timeRequired":"PT14M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Infisical","item":"https://daily.dev/squads/infisical"},{"@type":"ListItem","position":3,"name":"Enterprise Secrets Management: How to Solve Credential Problems at Scale"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/enterprise-secrets-management-how-to-solve-credential-problems-at-scale-bjlummnks#faq","mainEntity":[{"@type":"Question","name":"why did Microsoft stop rotating its consumer signing keys and what happened as a result","acceptedAnswer":{"@type":"Answer","text":"Microsoft paused rotating its consumer signing keys in 2021 following an outage linked to its manual rotation process. A 2016-issued key remained valid as a result, and a hacker group used that still-valid key to forge authentication tokens in an intrusion discovered in 2023, according to the US Cyber Safety Review Board's review. Teams wary of rotation-induced outages can follow ongoing secrets management practices on daily.dev."}},{"@type":"Question","name":"what service accounts did Cloudflare miss rotating after the Okta breach","acceptedAnswer":{"@type":"Answer","text":"Cloudflare's postmortem on its Thanksgiving 2023 security incident found that one service token and three service accounts, out of thousands, were not rotated after the Okta breach because they were mistakenly believed to be unused. An attacker used those credentials to reach Cloudflare's Atlassian systems. Engineers hardening credential hygiene after third-party breaches can follow similar incident writeups on daily.dev."}},{"@type":"Question","name":"how many separate secret vaults did Uber have before consolidating its secrets management","acceptedAnswer":{"@type":"Answer","text":"Uber's engineering team found 25 separate vaults owned by different teams before consolidating them into six as part of building a multi-cloud secrets management platform, illustrating how secret store sprawl accumulates across teams and clouds at large organizations. Anyone consolidating sprawling secret stores can track similar infrastructure case studies on daily.dev."}}]} ```