> ## Documentation Index
> Fetch the complete documentation index at: https://bloodhound.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# AZFederatedIdentityCredential

> The AZFederatedIdentityCredential node represents a Federated Identity Credential (FIC) configured on an Azure App Registration, which allows an external identity provider to authenticate as the application without a password or certificate.

<img noZoom src="https://mintcdn.com/specterops/tTIczgde9H07oLXf/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=tTIczgde9H07oLXf&q=85&s=ad49a576589f4d2a8081df77d07fdf56" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

## Node Properties

The node supports the following properties:

<Note>Properties that are blank/null will not be shown in the **Entity Panel**.</Note>

|                                              |                                                                                                                                                                                                                                                                                                                                          |
| -------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Entity Panel name**                        | **Description**                                                                                                                                                                                                                                                                                                                          |
| Tier Zero / High Value                       | BloodHound Enterprise: Whether the object is part of Tier Zero of the Microsoft's Active Directory Tier Model, or the Control Plane of Microsoft's Enterprise Access Model.  <br />  <br />BloodHound CE: Whether the object is currently marked as High Value. By default any object that belongs to Tier Zero is marked as High Value. |
| Display Name                                 | The display name for the object.                                                                                                                                                                                                                                                                                                         |
| Object ID                                    | The object's security identifier (SID), a unique identifier in the directory.                                                                                                                                                                                                                                                            |
| Federated Identity Credential Application ID | The unique identifier for the [AZApp](/resources/nodes/az-app) object that represents that Azure App Registration.                                                                                                                                                                                                                       |
| Audiences                                    | The audiences claim that identifies the intended recipients of the token issued by this FIC.                                                                                                                                                                                                                                             |
| Issuer                                       | The entity that issues the token, typically the external identity provider.                                                                                                                                                                                                                                                              |
| Last Seen By BloodHound                      | The most recent time that BloodHound observed this object in an ingested data payload.                                                                                                                                                                                                                                                   |
| Subject                                      | The subject claim that identifies the principal allowed to authenticate via this FIC.                                                                                                                                                                                                                                                    |