I am building a SAAS application which needs to have SSO with a client's ADFS server. Is it possible to get a URL to a user's AD profile picture to show up as a claim in the SAML token, so I can display it in my app?