I have 2 Identity Vaults when I create a user in the primary Vault I only
want IDM to create the user in the other Vault when they have an Boolean
attribute called VPNUser set to true. I have set up a policy to veto the
user if that attribute is not set to true. The user sits in a pending
status. How do I get them to not associate at all rather than sitting in a
pending state. Thank you.