User Avatar updating/enforcement from LDAP/Active Directory

[BloodyIron]

Hey so in ecosystems where they already have central-authentication such as LDAP or Active Directory, such as in a corporate environment, it can be commonplace where User Avatars (such as a picture of the staff member the account is for) are enforced by said central-authentication ecosystem (again, LDAP/Active Directory).

As such, implementing tools such as Matrix and clients for such an ecosystem (privately or otherwise) that can update the User Avatar in a way that supersedes the authentication domain can be problematic.

So what I was hoping is that this module could be extended in the following regards:

1. Have the mechanism(s) to pull from an image attribute from a user object (there can be multiple ones to pick from in Active Directory for example) and have that update the User Avatar in Matrix and the resulting Matrix Client Application(s).
2. Have the means to make it so this User Avatar is checked and/or updated every time the user logs into Matrix and/or refreshes their session, such that any changes to the User Avatar in the Authentication Domain is "immediately" reflected in Matrix and said Matrix Clients (as fast as possible anyways).
3. Have the mechanism(s) to decide/configure the LDAP/Active Directory interfacing to allow/block the Matrix/Clients from changing the User Avatar within Matrix/Clients to be different from the Authentication Domain (some environments may want this to be strict, some might be okay with a bit looser restrictions). Such that if this is "blocked" that when a User using the Matrix/Client ecosystem tries to change their User Avatar (within Matrix/Client) they are rejected along the lines of "this isn't allowed", and the User Avatar from the Authentication Domain always takes precedent.

I know this is a bit long-winded of an explanation but I wanted to be rather thorough in my description. Generally the idea is there are environments (such as one I'm working with) whereby the expectation set for users is they update their User Avatar in one place and it then propagates to all Applications that interface with it (in this case Matrix/Clients).

Any chance we could get this please?