By default, the plugin reads the avatar URL from the picture claim.
picture
You can set any valid JMESPath expression to extract a different claim.
Leave this field empty to disable avatar synchronization.