DirSync password LDAP filter is not being applied during the workflow run
There's a password LDAP filter specified, so it'll update only users, that Power365 /ODM AD has created, but not those that were matched (pre-existing target users). After running a workflow, it was found that all users' passwords were overwritten by the source passwords.
The product was designed, so password LDAP filter will only be applicable to the background password sync process. It was tested and confirmed that in the absence of running workflows, password LDAP filter is taken into account. Running workflow will ignore this filter and sync passwords of all matched users, regardless of this filter. Enhancement Request BTP365DS-I-15 has been created to address this issue in the future, so workflows will also abide by password LDAP filtering criteria.