Off-site avatar via API?

Why not try the sso overrides avatar site setting and pass the avatar URL with the SSO system? It may be better to handle this with SSO rather than making uploads manually with the API.