AnyIdentity PowerShell Script – Parameters not passed to script despite correct mapping

Hello everyone,
I'm currently working on integrating a password rotation script using AnyIdentity in Devolutions Server (DVLS) for Citrix ADC. I've created a custom AnyIdentity template with the following configuration:
✅ Provider Properties:

• targethost (String)
• user (Username)
• password (Password)

✅ Account Properties:

• account (Username)

✅ Script Parameters:
Mapped in the template as:

target → Provider → targethost
user → Provider → user
password → Provider → password
account → Account → account
NewPassword → System (default)

My PowerShell script starts with:

param(
[string]$target,
[string]$user,
[securestring]$password,
[string]$account,
[securestring]$NewPassword
)

Write-Output "target = $target"
...
All fields are filled in the PAM entry, and the correct AnyIdentity provider is selected.
However, during execution, I get the following error:

❌ 'target' is missing.
(Or: ❌ 'targethost' is missing. if I switch parameter names)

I’ve tried:

• Different parameter names (host, targethost, remoteHost, endpoint, etc.)
• Clean AnyIdentity templates with minimal logic
• Mapping provider fields via the UI
• Assigning values directly in the PAM entry
• Testing the script interactively on the DVLS server (works fine)
• Running DVLS Scheduler under a proper service account with access to Posh-SSH

No matter what I do – DVLS never passes the values into the script.

❗Question
Has anyone successfully used custom AnyIdentity password rotation with parameters passed from the provider?

• Is this a known issue with certain parameter names?
• Is there a limitation in the DVLS Scheduler’s script engine?
• Any working examples or templates to compare?

DVLS version: 2025.1.7.0
PowerShell: 7.5.1
Script tested independently = working
Thanks in advance – hoping someone has found a solution or workaround!

Best regards,
Alexander