Active Directory manager sync - block for inactive users

Just to close the loop on this in case anyone else has this issue, is we used a static transform that brings in managerDn and cloudLifecycleState and uses the below velocity code.

"value": "#if($cloudLifecycleState != 'terminated')$managerDn#end"