# Unable to change profile pic due to SSO override

**URL:** https://meta.discourse.org/t/unable-to-change-profile-pic-due-to-sso-override/72170
**Category:** SSO
**Created:** [October 16, 2017, 11:33am UTC](https://meta.discourse.org/t/unable-to-change-profile-pic-due-to-sso-override/72170 "2017-10-16T11:33:19Z")
**Posts on this page:** 13
**Page:** 1

<div class="post-metadata">

### Author: ![sianwhite](https://avatars.discourse-cdn.com/v4/letter/s/a8b319/32.png) [@sianwhite](https://meta.discourse.org/u/sianwhite)
#### Post date: [October 16, 2017, 11:33am UTC](https://meta.discourse.org/t/unable-to-change-profile-pic-due-to-sso-override/72170/1 "2017-10-16T11:33:19Z")

</div>

A user has been in touch to say when they joined our community a profile picture was automatically added to their profile (which I’ve never heard of happening before)

They asked me to remove it, but I can’t find the option to, either as an admin, or by impersonating.

Is there something I’m missing?

 ![Profile-image](https://global.discourse-cdn.com/meta/original/3X/0/8/087ec588ec018e0aecbb2b0d7f4071f11fff252e.jpg)

---

<div class="post-metadata">

### Author: ![fefrei](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fefrei/32/119538_2.png) [@fefrei](https://meta.discourse.org/u/fefrei)
#### Post date: [October 16, 2017, 11:35am UTC](https://meta.discourse.org/t/unable-to-change-profile-pic-due-to-sso-override/72170/2 "2017-10-16T11:35:54Z")

</div>

The button to change the profile picture should be right next to the profile picture, but appears to be missing here. Are you using SSO? What’s the value of the site setting `sso overrides avatar`?

---

<div class="post-metadata">

### Author: ![sianwhite](https://avatars.discourse-cdn.com/v4/letter/s/a8b319/32.png) [@sianwhite](https://meta.discourse.org/u/sianwhite)
#### Post date: [October 16, 2017, 11:38am UTC](https://meta.discourse.org/t/unable-to-change-profile-pic-due-to-sso-override/72170/3 "2017-10-16T11:38:31Z")

</div>

Thanks for getting back to me so quickly. I’m not a developer so this is slightly over my head. It looks like this:

 ![49](https://global.discourse-cdn.com/meta/original/3X/f/b/fbcd236eceacdb78154222bcc5daac5452f2a715.png)

---

<div class="post-metadata">

### Author: ![fefrei](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fefrei/32/119538_2.png) [@fefrei](https://meta.discourse.org/u/fefrei)
#### Post date: [October 16, 2017, 11:40am UTC](https://meta.discourse.org/t/unable-to-change-profile-pic-due-to-sso-override/72170/4 "2017-10-16T11:40:51Z")

</div>

Okay! To change the avatar, you need to change the avatar in the parent site you’re using.

Once this is changed, (unless your parent site syncs this automatically,) the user needs to sign in again for the changes to appear in Discourse. The easiest way to force this to happen is to simply log him out from the administration panel 🙂

---

<div class="post-metadata">

### Author: ![sianwhite](https://avatars.discourse-cdn.com/v4/letter/s/a8b319/32.png) [@sianwhite](https://meta.discourse.org/u/sianwhite)
#### Post date: [October 16, 2017, 11:47am UTC](https://meta.discourse.org/t/unable-to-change-profile-pic-due-to-sso-override/72170/5 "2017-10-16T11:47:10Z")

</div>

Thanks Felix - the user doesn’t have an avatar/profile picture in their account in our parent site’s CMS. I have no idea where the picture has come from, if they didn’t upload it themselves, which is really weird.

I logged Rubytoo out from the admin panel and that doesn’t seem to have made any difference.

Do you know why this might be happening? Why the edit button doesn’t appear for me?

---

<div class="post-metadata">

### Author: ![fefrei](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fefrei/32/119538_2.png) [@fefrei](https://meta.discourse.org/u/fefrei)
#### Post date: [October 16, 2017, 11:49am UTC](https://meta.discourse.org/t/unable-to-change-profile-pic-due-to-sso-override/72170/6 "2017-10-16T11:49:25Z")

</div>

> [@sianwhite](#):
>
> Why the edit button doesn’t appear for me?

That’s because avatars are handled by your CMS, so you cannot edit it within Discourse.

The question is where this image is coming from, and the last source that makes sense is Gravatar. Let me guess: The site setting `automatically download gravatars` is enabled?

---

<div class="post-metadata">

### Author: ![sianwhite](https://avatars.discourse-cdn.com/v4/letter/s/a8b319/32.png) [@sianwhite](https://meta.discourse.org/u/sianwhite)
#### Post date: [October 16, 2017, 11:51am UTC](https://meta.discourse.org/t/unable-to-change-profile-pic-due-to-sso-override/72170/7 "2017-10-16T11:51:30Z")

</div>

It is indeed! Would unticking that solve it?

---

<div class="post-metadata">

### Author: ![fefrei](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fefrei/32/119538_2.png) [@fefrei](https://meta.discourse.org/u/fefrei)
#### Post date: [October 16, 2017, 11:56am UTC](https://meta.discourse.org/t/unable-to-change-profile-pic-due-to-sso-override/72170/8 "2017-10-16T11:56:53Z")

</div>

Untick that. It won’t solve this problem, but prevent it from happening again. 🙂

To solve it, you’ll need to make a choice: Do you want to remove the Gravatar-provided avatars for this user only or for everyone? (Doing it for everyone is arguable more correct, but might surprise users.)

If you want to fix it for this user only, disable `sso overrides avatar` for a second, clear his avatar and re-enable `sso overrides avatar` to prevent further changes (which should only be made in your CMS). Then, tell your user that this image was pulled from Gravatar so he isn’t spooked 👻

If you want to fix it for everyone, this should probably be done through the Rails console.

---

<div class="post-metadata">

### Author: ![sianwhite](https://avatars.discourse-cdn.com/v4/letter/s/a8b319/32.png) [@sianwhite](https://meta.discourse.org/u/sianwhite)
#### Post date: [October 16, 2017, 12:03pm UTC](https://meta.discourse.org/t/unable-to-change-profile-pic-due-to-sso-override/72170/9 "2017-10-16T12:03:00Z")

</div>

You’re amazing, thanks so much! That seems to have solved the problem. Yay!

---

<div class="post-metadata">

### Author: ![fefrei](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fefrei/32/119538_2.png) [@fefrei](https://meta.discourse.org/u/fefrei)
#### Post date: [October 16, 2017, 12:05pm UTC](https://meta.discourse.org/t/unable-to-change-profile-pic-due-to-sso-override/72170/10 "2017-10-16T12:05:04Z")

</div>

Considering this case, I’m wondering whether automatic Gravatar downloads should always be suppressed when `sso overrides avatar` is enabled. Why should Discourse fetch an avatar from an external source when the settings explicitly say that the SSO parent is handling all avatars?

---

<div class="post-metadata">

### Author: ![system](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/system/32/443519_2.png) [@system](https://meta.discourse.org/u/system)
#### Post date: [November 20, 2019, 8:20pm UTC](https://meta.discourse.org/t/unable-to-change-profile-pic-due-to-sso-override/72170/11 "2019-11-20T20:20:30Z")

</div>



---

<div class="post-metadata">

### Author: ![system](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/system/32/443519_2.png) [@system](https://meta.discourse.org/u/system)
#### Post date: [August 22, 2023, 4:22pm UTC](https://meta.discourse.org/t/unable-to-change-profile-pic-due-to-sso-override/72170/12 "2023-08-22T16:22:39Z")

</div>



---

<div class="post-metadata">

### Author: ![Canapin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/canapin/32/119591_2.png) [@Canapin](https://meta.discourse.org/u/Canapin)
#### Post date: [August 22, 2023, 6:46pm UTC](https://meta.discourse.org/t/unable-to-change-profile-pic-due-to-sso-override/72170/13 "2023-08-22T18:46:49Z")

</div>


