Hi @adama,
By default sync will always happen once activated.
Instead of use sync attribute you can deploy Sailpoint service standard before provisioning rule i, your tenant Services Standard Before Provisioning Rule - Identity Security Cloud (ISC) / ISC Discussion and Questions - SailPoint Developer Community and configure cloudServicesIDNSetup in your source like this :
"cloudServicesIDNSetup": {
"eventConfigurations": [
{
"eventActions": [
{
"Action": "UpdateAttribute",
"Attribute": "department",
"Value": "#{identity.department}"
}
],
"Identity Attribute Triggers": [
{
"Attribute": "cloudLifecycleState",
"Value": "active",
"Operation": "eq"
},
{
"Attribute": "department",
"Value": "*",
"Operation": "eq"
}
],
"Operation": "Modify"
}
]
}