AnyIdentity PowerShell Script – Parameters not passed to script despite correct mapping

Hello everyone,

I'm currently working on integrating a password rotation script using AnyIdentity in Devolutions Server (DVLS) for Citrix ADC. I've created a custom AnyIdentity template with the following configuration:

✅ Provider Properties:

• targethost (String)

• user (Username)

• password (Password)

✅ Account Properties:

• account (Username)

✅ Script Parameters:

Mapped in the template as:

target → Provider → targethost

user → Provider → user

password → Provider → password

account → Account → account

NewPassword → System (default)

My PowerShell script starts with:

param(

[string]$target,

[string]$user,

[securestring]$password,

[string]$account,

[securestring]$NewPassword

)

Write-Output "target = $target"

...

All fields are filled in the PAM entry, and the correct AnyIdentity provider is selected.

However, during execution, I get the following error:

❌ 'target' is missing.

(Or: ❌ 'targethost' is missing. if I switch parameter names)

I’ve tried:

• Different parameter names (host, targethost, remoteHost, endpoint, etc.)

• Clean AnyIdentity templates with minimal logic

• Mapping provider fields via the UI

• Assigning values directly in the PAM entry

• Testing the script interactively on the DVLS server (works fine)

• Running DVLS Scheduler under a proper service account with access to Posh-SSH

No matter what I do – DVLS never passes the values into the script.

❗Question

Has anyone successfully used custom AnyIdentity password rotation with parameters passed from the provider?

• Is this a known issue with certain parameter names?

• Is there a limitation in the DVLS Scheduler’s script engine?

• Any working examples or templates to compare?

DVLS version: 2025.1.7.0

PowerShell: 7.5.1

Script tested independently = working

Thanks in advance – hoping someone has found a solution or workaround!

Best regards,

Alexander