OU placement based on group membership

This may have been asked before, but I did not find it in my searches.

I have a setup where authoritative user information is being provided through an ADLDS instance - this includes both general user information as well as some specific groups (actually groupsofnames) which are used to determine user roles.

In both initial provisioning, as well as subsequent rename operations, I need to be able to reference which groups (currently a total of 8 possible) that a given user object is a member of and use that information to build the DN - specifically for determining which OU the account will be in.

The FIM configuration is in place and operating against an older authoritative datasource at this time using classic rules extentions for all of the provisioning and advance import/export attribute flows.  This will most likely continue to be the case due to limitations with the declarative provisioning capabilities.  The existing code will be updated to reflect the new authoritative source as soon as I can figure out how to get the data needed from the group membership.

Thanks in advance.

-Jody