So, I found this that ended up being the answer.
Apparently google is better at search than discourse is. It doesn’t capture the whole request object like I was hoping for so that I could basically “replay” a provisioning event without actually having to build an AD account, but it solves the immediate need of finding the attribute I was looking for inside the request.