can anyone help with info on setting up photos to sync from LDAP active directory. i have the ldap sync set up for user auth and provisioning but i haven't used the photo field of the mapping. I just tried putting "thumbnailPhoto" in that field since that is the AD field attribute name but that didn't work...