Filter SAP Roles To import in One Identity.

Hi, 

I'm using One Identity Manager 9.1. 

I'm going to synchronize SAP Roles memeberships but i want to filter memeberships to insert. I want to Insert only SAP Role memeberships of user Accounts linked to an employee ed exclude all the other memeberships. 

I tried Creating a virtual property on UserInRole Mapping on One Idenitty Manager side. The virtual property returns true or false if the user in the membership is linked to an Identity or Not. 

Unfortunately it doesn't work if i try to create a condition on the Workflow, during the insert operation, because the object it's not on One Identity Database yet. So the only possible filter i can create should be based on a left Sided property (Other.Property) . 

I tried also with the creation of a Virtual property on the Right Side of the mapping. This virtual property reads another virtual property (tipe script) on the user object. This virtual property contains the info of the Employee identifier that we use as matching info.  If I check with a browse on SAP Roles Memeberships, i can see that the  role membership has this virtual property correctly populated with the identifier of the employee. 

If I create a filter on Scope or a condition in Worklfow's insert operation it really slows down end makes quite impossible to browse the target system or create a simulation. This happens obviusly depending on the amount of user account and memeberships on target system 

Did anyone ever tried to implement a filter like this? Is there any way I can set a condition to check objects in One Identity before importing another related object from Target System?

Thank You, 

Enrico.