Here is a thought…
use idn.countIdentitiesBySearchableIdentityAttribute() with an Identity Attribute that is mapped to a unique attribute from HR. If count is > 0, then the identity has already been created and return identity.getEmail(). Else, generate the email.
However, read the second paragraph about uniqueness check below
