Docs: Additional visibility for use of email during SCIM provisioning

doc/user/group/saml_sso/scim_setup.md

@@ -202,6 +202,10 @@ Upon the next sync, the user is deprovisioned, which means that the user is remo
 NOTE:
 Deprovisioning does not delete the user account.
 
+During the synchronization process, all of your users get GitLab accounts, welcoming them
+to their respective groups, with an invitation email. When implementing SCIM provisioning,
+you may want to warn your security-conscious employees about this email.
+
 ```mermaid
 graph TD
   A[Remove User from SCIM app] -->|IdP sends request to GitLab| B(GitLab: Is the user part of the group?)
@@ -209,10 +213,6 @@ graph TD
   B -->|Yes| D[GitLab removes user from GitLab group]
 ```
 
-During the synchronization process, all of your users get GitLab accounts, welcoming them
-to their respective groups, with an invitation email. When implementing SCIM provisioning,
-you may want to warn your security-conscious employees about this email.
-
 ## Troubleshooting
 
 This section contains possible solutions for problems you might encounter.