SCIM provisioning requires an inbound connection to your Atlassian servers. In many cases, the company’s Atlassian servers will sit behind a corporate firewall, requiring a an intermediate reverse proxy, gateway or load balancer in at the perimeter or in most casesthe DMZ.
The figure illustrates what a typical Jira Datacenter deployment would look like with SCIM:
...