IPS only provision entity, if user logged into another system

[Jamma]

Hi all,

I received the requirement to provision users from AzureAD to SAP Enable Now, which should be pretty straight forward as far as I know.
But now I got asked, if it is possible to only provision users to SAP Enable Now, if they, at least once, logged in to SAP Concur. The thought process behind all that is, that we might save some licences, if only the employees, who actually work with SAP Concur are provisioning, instead of every employee of the company.

Now I have two questions.

1. Generally speaking, is it possible, to only provision from a source system to a target system, if they logged into another system, which is neither source nor target?

2. If this is possible, how would I check for this in a condition?

I feel like this won't be possible, because inside the source system transformation, you can only access the user's attributes of AzureAD and i'm pretty sure that there's no attribute to check, if a user has logged into a specific system or not.

Any help would be greatly appreciated.