Dynamic Security - Sync'ing from HCM to FIN

Has anyone found a method or approach to sync dynamically maintained roles in HCM to FIN. My goal is to us dynamic security in HCM, but for those roles to be updated in FIN.  Example:  Create a Employee Expenses role in HCM, new users are granted this role based on a query, and then IB updates in FIN.

How do people handle?

I found this note in Oracle Support:  With DYNROLE or DYNROLE_PUBL, the user profiles are modified by the delivered process and no integration broker messaging is called upon to update those changes in HCM or any other database.