SSO avatar not updating when using URLs from my site

Does the WP site have an SSL certificate? (http vs https in the avatar_url)

Is Discourse forcing https? Settings > Security > force https