diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index 29f99164d..6a573b88d 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -17,6 +17,10 @@ Unreleased
 ----------
 * nothing unreleased
 
+[4.25.8]
+----------
+* feat: added migration for removing unencrypted client credentials
+
 [4.25.7]
 ----------
 * refactor: removed unencrypted credentials from sap config model
diff --git a/enterprise/__init__.py b/enterprise/__init__.py
index a2e3e77a7..faf5cc4ba 100644
--- a/enterprise/__init__.py
+++ b/enterprise/__init__.py
@@ -2,4 +2,4 @@
 Your project description goes here.
 """
 
-__version__ = "4.25.7"
+__version__ = "4.25.8"
diff --git a/integrated_channels/sap_success_factors/migrations/0024_auto_20240909_1614.py b/integrated_channels/sap_success_factors/migrations/0024_auto_20240909_1614.py
new file mode 100644
index 000000000..cb1ec57b0
--- /dev/null
+++ b/integrated_channels/sap_success_factors/migrations/0024_auto_20240909_1614.py
@@ -0,0 +1,21 @@
+# Generated by Django 3.2.23 on 2024-09-09 16:14
+
+from django.db import migrations
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('sap_success_factors', '0023_auto_20240909_1556'),
+    ]
+
+    operations = [
+        migrations.RemoveField(
+            model_name='sapsuccessfactorsenterprisecustomerconfiguration',
+            name='key',
+        ),
+        migrations.RemoveField(
+            model_name='sapsuccessfactorsenterprisecustomerconfiguration',
+            name='secret',
+        ),
+    ]