Hi,
I am beginner at IDM... and can't resolve one (may be simple) problem.
I need selectively remove values of Group Membership attribute from users
(for example, values contains "market"). I created action (below), bat
can't understand why it not work. May be need other solution?
Help, please. Thank you.

<do-set-local-variable name="UserGroups" scope="policy">
<arg-node-set>
<token-attr name="Group Membership"/>
</arg-node-set>
</do-set-local-variable>

<do-for-each>
<arg-node-set>
<token-local-variable name="UserGroups"/>
</arg-node-set>
<arg-actions>
<do-if>
<arg-conditions>
<and>
<if-xpath op="true">$current-node='.*market.*'</if-xpath>
</and>
</arg-conditions>
<arg-actions>
<do-remove-src-attr-value class-name="User" name="Group Membership">
<arg-value type="dn">
<token-local-variable name="current-node"/>
</arg-value>
</do-remove-src-attr-value>
<do-remove-src-attr-value class-name="User" name="Security Equals">
<arg-value type="dn">
<token-local-variable name="current-node"/>
</arg-value>
</do-remove-src-attr-value>
</arg-actions>
<arg-actions/>
</do-if>
</arg-actions>
</do-for-each>