Lifecycle Transform issue

Identity Security Cloud (ISC) ISC Discussion and Questions
4

There are 2 attributes you can use to derive if account is enabled or disabled.
One is IIQDisabled-> If NULL it is active and if true , account is disabled.
This variable is common between all connectors and can be used for any type of source.

For specifically AD, There is another attribute which is accountFlags. If it contains “User Account is Disabled” then your AD account is disabled.

I wrote 2 transforms in past to get active account only from Identity if there are multiple AD account from same source under identity. You can take reference and build your transform

{
    "attributes": {
        "accountPropertyFilter": "( IIQDisabled.isNull())",
        "applicationId": "2c91808362878e2a01628fdf0c7d5aa2",
        "applicationName": "IdentityNow AD [source-111329]",
        "attributeName": "sAMAccountName",
        "sourceName": "AD"
    },
    "id": "Filter using IIQDisabled",
    "type": "accountAttribute"
}

{
				"attributes": {
					"accountPropertyFilter": "!(accountFlags.contains(\"User Account is Disabled\"))",
					"applicationId": "2c91808362878e2a01628fdf0c7d5aa2",
					"applicationName": "IdentityNow AD [source-111329]",
					"attributeName": "distinguishedName",
					"sourceName": "AD"
				},
				"id": "Filter using account Flag",
				"type": "accountAttribute"
			}