Sailpoint IdentityIQ supports managing users and groups directly through the users and groups API endpoints in Jira/Confluence Cloud. This is trivial to set up, and it reports back directly all accounts in the site. It also doesn't cost Atlassian Guard licenses.
Sailpoint's SCIM connector is difficult to set up and doesn't aggregate accounts that already exist in cloud. Why should I use the SCIM connector instead? What does SCIM user provisioning offer over directly provisioning users through the Jira/Confluence Cloud API?