This could be an additional Identity Provider, to allow to sync Users and Group Assignments in case the Identity Provider is not exposed to the Cloud. One could use LDAP or Active Directory to sync users and groups into Secfix.

I imagine it a bit like the LDAP connection from Bitwarden, where you can run a client application on one of your machines at the office network and that pushes the required data to secfix