diff --git a/backend/src/db/migrations/20250815022242_identity-lockouts.ts b/backend/src/db/migrations/20250815022242_identity-lockouts.ts
index 7b27296dd..a0e661d2d 100644
--- a/backend/src/db/migrations/20250815022242_identity-lockouts.ts
+++ b/backend/src/db/migrations/20250815022242_identity-lockouts.ts
@@ -4,22 +4,48 @@ import { TableName } from "../schemas";
 
 export async function up(knex: Knex): Promise<void> {
   if (await knex.schema.hasTable(TableName.IdentityUniversalAuth)) {
-    await knex.schema.alterTable(TableName.IdentityUniversalAuth, (t) => {
-      t.boolean("lockoutEnabled").notNullable().defaultTo(true);
-      t.integer("lockoutThreshold").notNullable().defaultTo(3);
-      t.integer("lockoutDuration").notNullable().defaultTo(300); // 5 minutes (in seconds)
-      t.integer("lockoutCounterReset").notNullable().defaultTo(30); // 30 seconds
+    const hasLockoutEnabled = await knex.schema.hasColumn(TableName.IdentityUniversalAuth, "lockoutEnabled");
+    const hasLockoutThreshold = await knex.schema.hasColumn(TableName.IdentityUniversalAuth, "lockoutThreshold");
+    const hasLockoutDuration = await knex.schema.hasColumn(TableName.IdentityUniversalAuth, "lockoutDuration");
+    const hasLockoutCounterReset = await knex.schema.hasColumn(TableName.IdentityUniversalAuth, "lockoutCounterReset");
+
+    await knex.schema.alterTable(TableName.IdentityUniversalAuth, async (t) => {
+      if (!hasLockoutEnabled) {
+        t.boolean("lockoutEnabled").notNullable().defaultTo(true);
+      }
+      if (!hasLockoutThreshold) {
+        t.integer("lockoutThreshold").notNullable().defaultTo(3);
+      }
+      if (!hasLockoutDuration) {
+        t.integer("lockoutDuration").notNullable().defaultTo(300); // 5 minutes (in seconds)
+      }
+      if (!hasLockoutCounterReset) {
+        t.integer("lockoutCounterReset").notNullable().defaultTo(30); // 30 seconds
+      }
     });
   }
 }
 
 export async function down(knex: Knex): Promise<void> {
   if (await knex.schema.hasTable(TableName.IdentityUniversalAuth)) {
+    const hasLockoutEnabled = await knex.schema.hasColumn(TableName.IdentityUniversalAuth, "lockoutEnabled");
+    const hasLockoutThreshold = await knex.schema.hasColumn(TableName.IdentityUniversalAuth, "lockoutThreshold");
+    const hasLockoutDuration = await knex.schema.hasColumn(TableName.IdentityUniversalAuth, "lockoutDuration");
+    const hasLockoutCounterReset = await knex.schema.hasColumn(TableName.IdentityUniversalAuth, "lockoutCounterReset");
+
     await knex.schema.alterTable(TableName.IdentityUniversalAuth, (t) => {
-      t.dropColumn("lockoutEnabled");
-      t.dropColumn("lockoutThreshold");
-      t.dropColumn("lockoutDuration");
-      t.dropColumn("lockoutCounterReset");
+      if (hasLockoutEnabled) {
+        t.dropColumn("lockoutEnabled");
+      }
+      if (hasLockoutThreshold) {
+        t.dropColumn("lockoutThreshold");
+      }
+      if (hasLockoutDuration) {
+        t.dropColumn("lockoutDuration");
+      }
+      if (hasLockoutCounterReset) {
+        t.dropColumn("lockoutCounterReset");
+      }
     });
   }
 }