We have forefront identity manager 2010 R2 and self service portal is configured. Users can update some basic information which needs approval.

We want to allow users to update their profile picture in AD using self service portal, Is it possible? How it can be

Muhammad,

See, in AD the profile picture can be stored as a binary value and not as an image file. So, you can grant permission from MPR to the user accessing the FIM Portal to upload/change the profile picture but at AD side it will be stored as a Binary value.

Just create a flow of photo attribute from FIM MA to metaverse and from here to AD - when you upload photo to FIM Portal it is converted to binary value and can be simply exported to AD.

the correct attribute in AD to select the export to is thumbnailPhoto i guess.

Also make sure the photo user's select is less than 100kb otherwise it will be visible in the portal but will not be exported to AD.

there is an option in the user RCDC to check the size of the photo before uploading to the portal.

Also check the following links.

http://blog.cjwdev.co.uk/2010/11/03/the-thumbnailphoto-attribute-explained/

https://social.technet.microsoft.com/Forums/en-US/71f8bc1f-2b4d-4a67-8edf-aa0624593506/change-sizelimit-of-photo-atribute-in-fim-portal?forum=ilm2