Identity providers lack built-in capabilities to sync profile pictures. This page provides instructions for you to sync photos to your Atlassian organization from different identity providers. You need to configure user provisioning attributes in your identity provider in these steps.

1. Create attributes for photo value and type in your identity provider.

2. Create attributes for photo value and type in Atlassian app.

3. Map user profile attributes to the Atlassian app.

Before you begin

To sync photos to your Atlassian organization, you need to update the photo attribute in your identity provider and host the photo on a server that Atlassian can access. You can sync photos from the following identity providers: Microsoft Entra (Azure), Okta, One Login, and Ping Identity.

To update attribute name and value:

1. Enter attribute name urn:ietf:params:scim:schemas:core:2.0:User:photos

2. Enter attribute value in this format:
   [ {value: "https://www.example.com/image.jpeg", type: "photo", primary: True/False}]

To host the photo:
Make sure your server supports the following endpoints:

1. HEAD - that returns an image content type.

   1. Content type- "image/jpeg"

2. GET - that returns the image along with the content type.

   1. Content type- "image/jpeg"

   2. Body - Image

Sync photos from Okta

To create attributes for photo value and type in your identity provider:

1. Select Directory > Profile editor > Select the App User (default).

2. Select Add Attribute.

3. Create a new attribute with

   1. Display Name - Primary Photo Value

   2. variable name-primaryPhotoValue

   3. Data type - string

4. For Okta, it is not required to create an additional attribute for Photo Type because the Atlassian app allows sending the same value “photo” for all users.

To create attributes in Atlassian app:

1. Go to applications, select Atlassian cloud> Provisioning.

2. Select Go to Profile Editor.

3. Add attribute for the display name Primary Photo Value.

   1. Data type - string

   2. Variable name - primary_photo_value

   3. External name - photos.^[primary==true].value

   4. External namespace - urn:ietf:params:scim:schemas:core:2.0:User

4. Add attribute for the display name: Primary Photo Type.

   1. Data type - string

   2. Variable name - primary_photo_type

   3. External name - photos.^[primary==true].type

   4. External namespace - urn:ietf:params:scim:schemas:core:2.0:User

To map user profile attributes to Atlassian app:

1. Go to applications, select Atlassian cloud> Provisioning.

2. Select Show unmapped attributes.

3. Edit these attributes.

   1. Select primary photo attribute value.

   2. Select map from Okta profile.

   3. Select user profile level attribute primaryPhotoValue.

4. Apply on> select create and update.

5. Select primary photo type:

   1. Select - same value for all users.

   2. Enter “photo”.

6. Apply on > select create and update.

View photo in account profile

After you update the attribute and host the photo, you can view the photo for the managed account in their account profile.

To view the photo:

1. Log in to id.atlassian.com as the user.

2. See that the profile picture has changed for the user.

Sync photos from Microsoft Entra ID (Azure)

To create attributes for profile photo in your identity provider

You must edit the Entra ID custom profile attributes through Graph API. When you access the graph API, you will need to update users in Users > Patch API.

You’re able to access the graph API through Graph explorer at Microsoft. Go to Microsoft for more detailed instructions.

1. Select Microsoft Entra Id > External Identities > Self-service sign up > Custom user attributes.

2. Select to add attribute:

   1. Enter Name photoValue

   2. Select Data Type String.

   3. Select Create.

3. Select to add attribute:

   1. Enter Name photoPrimary

   2. Select Data Type Boolean.

   3. Select Create.

   4. For the photo primary status attribute we don’t create an attribute, we can map a constant to be True.

To create attributes in the Atlassian app

Go to and select Enterprise Application.

1. Select Atlassian application> Manage > Provisioning.

2. Expand Mappings > Select “Provision Microsoft Entra ID Users”.

3. Select Show advanced options.

4. Select Edit attribute list for AtlassianCloud.

5. Select Photo Value

   1. Enter Name photos[type eq "photo"].value.

   2. Select Type String.

6. Select Photo Primary Status

   1. Enter Name photos[type eq "photo"].primary.

   2. Select type Boolean.

To map user profile attribute to Atlassian app

Go to and select Enterprise Application.

1. Select Atlassian application> Manage > Provisioning.

2. Expand Mappings > Select Provision Microsoft Entra ID Users > Add New Mapping.

3. Select Photo Value

   1. Select Mapping type Direct.

   2. Enter Source attribute photoValue.

   3. Enter Target attribute photos[type eq "photo"].value.

4. Select Photo Primary Status

   1. Select Mapping type Constant.

   2. Select Constant Value True.

   3. Enter Target attribute photos[type eq "photo"].primary.

View photo in account profile

After you update the attribute and host the photo, you can view the photo for the managed account in their account profile.

To view the photo:

1. Log in to id.atlassian.com as the user.

2. See that the profile picture has changed for the user.