password rotation in ADFS

 ADFS farm, configuration in dedicated SQL database, standard service accounts in Active Directory, how to rotate passwords? Nothing unexpected:

• change password on account in Active Directory
• change on every node of the farm - in service configuration (through services.msc)
• restart
• low risk of account lockout - my personal preference - do it on Wednesday or Thursday evening - when most of customers do not use it actively