diff --git a/internal/config/config.go b/internal/config/config.go
index d2d43a52..111dac6b 100644
--- a/internal/config/config.go
+++ b/internal/config/config.go
@@ -39,6 +39,10 @@ func (m *ConfigManager) migrate(config *v1.Config) error {
 		if err := migrations.ApplyMigrations(config); err != nil {
 			return err
 		}
+		// Migrations may clear required fields (e.g. legacy identities); re-populate.
+		if _, err := PopulateRequiredFields(config); err != nil {
+			return fmt.Errorf("populate required fields after migration: %w", err)
+		}
 		mutated = true
 	}
 	if mutated {