> ## Documentation Index
> Fetch the complete documentation index at: https://bloodhound.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# GH_ExternalIdentity

> An external identity from a SAML/SCIM provider linked to a GitHub user for SSO authentication

<img noZoom src="https://mintcdn.com/specterops/tTIczgde9H07oLXf/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=tTIczgde9H07oLXf&q=85&s=ad49a576589f4d2a8081df77d07fdf56" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

Represents an external identity from a SAML or SCIM identity provider that is linked to a GitHub user. External identities map corporate user accounts (from providers like Okta, Azure AD, etc.) to GitHub user accounts, enabling single sign-on authentication. Each external identity can have both SAML and SCIM identity attributes.

## Edges

<Note>
  The tables below list edges defined by the GitHub extension only. Additional edges to or from this node may be created by other extensions.
</Note>

### Inbound Edges

| Edge Type                                                                            | Source Node Types                                                                      | Traversable |
| ------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------------- | ----------- |
| [GH\_HasExternalIdentity](/opengraph/extensions/github/edges/gh_hasexternalidentity) | [GH\_SamlIdentityProvider](/opengraph/extensions/github/nodes/gh_samlidentityprovider) | ❌           |

### Outbound Edges

| Edge Type                                                          | Destination Node Types                                 | Traversable |
| ------------------------------------------------------------------ | ------------------------------------------------------ | ----------- |
| [GH\_MapsToUser](/opengraph/extensions/github/edges/gh_mapstouser) | [GH\_User](/opengraph/extensions/github/nodes/gh_user) | ❌           |

## Properties

| Property Name                | Data Type | Description                                              |
| ---------------------------- | --------- | -------------------------------------------------------- |
| objectid                     | string    | The GraphQL ID of the external identity.                 |
| node\_id                     | string    | The GraphQL ID of the external identity.                 |
| name                         | string    | Same as objectid.                                        |
| guid                         | string    | The GUID of the external identity.                       |
| environmentid                | string    | The GraphQL ID of the environment (GitHub organization). |
| environment\_name            | string    | The name of the environment (GitHub organization).       |
| saml\_identity\_family\_name | string    | The family name from the SAML identity.                  |
| saml\_identity\_given\_name  | string    | The given name from the SAML identity.                   |
| saml\_identity\_name\_id     | string    | The SAML NameID attribute.                               |
| saml\_identity\_username     | string    | The username from the SAML identity.                     |
| scim\_identity\_family\_name | string    | The family name from the SCIM identity.                  |
| scim\_identity\_given\_name  | string    | The given name from the SCIM identity.                   |
| scim\_identity\_username     | string    | The username from the SCIM identity.                     |
| github\_username             | string    | The GitHub login of the linked user.                     |
| github\_user\_id             | string    | The GraphQL ID of the linked GitHub user.                |

## Diagram

```mermaid theme={null}
flowchart TD
    GH_SamlIdentityProvider[fa:fa-id-badge GH_SamlIdentityProvider]
    GH_ExternalIdentity[fa:fa-arrows-left-right GH_ExternalIdentity]
    GH_User[fa:fa-user GH_User]
    AZUser[fa:fa-user AZUser]
    Okta_User[fa:fa-user Okta_User]
    PingOneUser[fa:fa-user PingOneUser]


    GH_SamlIdentityProvider -.->|GH_HasExternalIdentity| GH_ExternalIdentity
    GH_ExternalIdentity -.->|GH_MapsToUser| GH_User
    GH_ExternalIdentity -.->|GH_MapsToUser| AZUser
    GH_ExternalIdentity -.->|GH_MapsToUser| Okta_User
    GH_ExternalIdentity -.->|GH_MapsToUser| PingOneUser
```
