On an IdentityLifecycle type workflow, a parameter is passed called event. This refers to an IdentityChangeEvent object. that object has a method called getOldObject() which returns the identity’s state before the event occurred. I’m seeing some workflows run where the oldObject is VERY old, like 5 years old. Does anyone know what the source of data is for the getOldObject method on the IdentityChangeEvent object?
Turns out this was simple, the “previousIdentity” is sourced from the IdentityArchive object.