The Services Standard Before Provisioning Rule is a cloud-executed rule managed by SailPoint. It allows you to intercept and modify ProvisioningPlans before they are sent to downstream connectors. Common actions include scrambling passwords, moving Active Directory (AD) OUs, and stripping entitlements during offboarding. [1, 2, 3, 4]