Identity providers lack built-in capabilities to sync profile pictures. This page provides instructions for you to sync photos to your Atlassian organization from different identity providers. You need to configure user provisioning attributes in your identity provider in these steps.

1. Create attributes for photo value and type in your identity provider.

2. Create attributes for photo value and type in Atlassian app.

3. Map user profile attributes to the Atlassian app.

Before you begin

To sync photos to your Atlassian organization, you need to update the photo attribute in your identity provider and host the photo on a server that Atlassian can access. You can sync photos from the following identity providers: Microsoft Entra (Azure), Okta, One Login, and Ping Identity.

To update attribute name and value:

1. Enter attribute name urn:ietf:params:scim:schemas:core:2.0:User:photos

2. Enter attribute value in this format:
   [ {value: "https://www.example.com/image.jpeg", type: "photo", primary: True/False}]

To host the photo:
Make sure your server supports the following endpoints:

1. HEAD - that returns an image content type.

   1. Content type- "image/jpeg"

2. GET - that returns the image along with the content type.

   1. Content type- "image/jpeg"

   2. Body - Image

Sync photos from Okta

To create attributes for photo value and type in your identity provider:

1. Select Directory > Profile editor > Select the App User (default).

2. Select Add Attribute.

3. Create a new attribute with

   1. Display Name - Primary Photo Value

   2. variable name-primaryPhotoValue

   3. Data type - string

4. For Okta, it is not required to create an additional attribute for Photo Type because the Atlassian app allows sending the same value “photo” for all users.

To create attributes in Atlassian app:

1. Go to applications, select Atlassian cloud> Provisioning.

2. Select Go to Profile Editor.

3. Add attribute for the display name Primary Photo Value.

   1. Data type - string

   2. Variable name - primary_photo_value

   3. External name - photos.^[primary==true].value

   4. External namespace - urn:ietf:params:scim:schemas:core:2.0:User

4. Add attribute for the display name: Primary Photo Type.

   1. Data type - string

   2. Variable name - primary_photo_type

   3. External name - photos.^[primary==true].type

   4. External namespace - urn:ietf:params:scim:schemas:core:2.0:User

To map user profile attributes to Atlassian app:

1. Go to applications, select Atlassian cloud> Provisioning.

2. Select Show unmapped attributes.

3. Edit these attributes.

   1. Select primary photo attribute value.

   2. Select map from Okta profile.

   3. Select user profile level attribute primaryPhotoValue.

4. Apply on> select create and update.

5. Select primary photo type:

   1. Select - same value for all users.

   2. Enter “photo”.

6. Apply on > select create and update.

View photo in account profile

After you update the attribute and host the photo, you can view the photo for the managed account in their account profile.

To view the photo:

1. Log in to id.atlassian.com as the user.

2. See that the profile picture has changed for the user.