I have tried that now and it looks like the attribute is only populated during outer post auth. Which means inner processing is already finished. So we have a chicken and egg situation :)