How can I key on a user using IDM FOR ad when a user authenticates? Is the
attribute on the primary DC in AD lastLogon which gets modified?