Syncing profile pictures from Azure Active Directory to Azure DevOps

Question

I have an Azure DevOps organization linked with my Azure AD tenant. Azure Active Directory (security) groups are exactly shown in the group search of the organization. Profile picture of my users is not shown correctly in  Azure DevOps. In Office 365 and in Azure AD my profile picture shows up correctly, but in Azure DevOps, only my initials show up in a colored circle.
Am I missing any steps?

Answer 1

There is a circular profile icon on the top right corner of the page of the organization. Go to my profile options and click it. You can set up your profile pic or icon my edit profile pic option. After completing all the above steps, please wait a moment, because the server may need some time to synchronize settings and display user profile images in the organization.

Answer 2

As of my last knowledge update in January 2022, the synchronization of user profile pictures from Azure Active Directory (Azure AD) to Azure DevOps (formerly Visual Studio Team Services or VSTS) is not a built-in feature. However, you can achieve this synchronization through a custom solution using Azure AD Graph API, Microsoft Graph API, or other available mechanisms.

Here are general steps you can follow:

1. Register an Application in Azure AD:

   • Go to the Azure portal.
   • Navigate to Azure Active Directory > App registrations > New registration.
   • Register an application and note down the Application (client) ID and Directory (tenant) ID.

2. Assign API Permissions:

   • In the registered application, go to API permissions.
   • Add the necessary permissions, such as User.Read.All for Microsoft Graph API.

3. Get App Secret:

   • Generate a client secret in the Certificates & secrets section for your application.

4. Configure Azure DevOps Service Connection:

   • In Azure DevOps, go to Project Settings > Service connections.
   • Add a new service connection for Azure Resource Manager using the Application ID, Directory ID, and Secret obtained in previous steps.

5. Develop a Script or Application:

   • Create a script or application that uses the Azure AD Graph API or Microsoft Graph API to retrieve user profile pictures from Azure AD.
   • Use the Azure DevOps REST API to update user profile pictures in Azure DevOps.

6. Implement Sync Mechanism:

   • Schedule the script or application to run periodically to keep Azure DevOps user profile pictures in sync with Azure AD.

Here's a simplified example in PowerShell using Microsoft Graph API for fetching and updating profile pictures:

Note: Make sure to adapt the script to your specific requirements and test it thoroughly in a controlled environment.

Always refer to the latest documentation for Azure AD Graph API, Microsoft Graph API, and Azure DevOps REST API, as these services may receive updates after my last knowledge update.