I’m trying to import the previous value of the AD attribute into the PS script so that I can use it to remove membership from group entitlements.
Does anyone have a working example of how to do this? I’m assuming that I will probably have to add something to the OOB rule.
There is Before Provisioning Rule which will add this previous value to the AccountRequest argument and you will be picking out that argument in the connector rule to cater to your use-case.
As for the rule the BeforeProvisioningRule will be almost same like in IdentityIQ the only caviat is to leverage ISC specific classes.
Here is an example for getting the old value of extensionAttribute4 in the After Modify PowerShell script. Note that you will get this value only if extensionAttribute4 is changing as part of the event.