Hi,

We are trying to push email to AD based on value. In case the user's email in Saviynt has XXXX then we will map SSM email to AD mail. We were able to achieve this using the below config.

"mail": "${if((user.email.contains('xxxx.com'))){user.email}}"

But the problem is, if the user email has yyyy.com in SSM, then the above config is clearing the mail attribute in AD as the above config does not handle the else part.

Please note that the source of truth for yyyy.com users is AD and SSM gets the yyyy.com emails from AD. Are there any suggestions to handle the above scenario?