Omg… It’s because of this: Unable to perform date logic in custom identity attribute search - #4 by sup3rmark
I literally need to rename the identity attribute to have “DateType” at the end so SailPoint interprets this as a date rather than a string…
I renamed the identity attribute from admLastInteractiveSignin to admlastinteractivesignindatetype and it works… simply by adding “datetype”:
That’s unbelievable and almost nowhere in the documentation…
