When migrating away from Cognito to another authentication service, teams can only choose between forcing users to reset their passwords or implementing a gradual migration, neither of which is ideal.