Implement an SQL Org Identity Source plugin, that basically works as the inverse of SqlProvisioner. Initially, the input would be in a well defined table format (or maybe formats, one flat and one relational), though in the future perhaps a mechanism for custom schemas could be added.