> ## Documentation Index
> Fetch the complete documentation index at: https://specterops-fetch-json-component.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# GH_HasExternalIdentity

> SAML identity provider has this external identity

<img noZoom src="https://mintcdn.com/specterops-fetch-json-component/pkiaFEhjWYPnhxMb/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=pkiaFEhjWYPnhxMb&q=85&s=c83d7e4a67c741a979c0e77bf15c1252" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

## Edge Schema

* Source: [GH\_SamlIdentityProvider](/opengraph/extensions/githound/reference/nodes/gh_samlidentityprovider)
* Destination: [GH\_ExternalIdentity](/opengraph/extensions/githound/reference/nodes/gh_externalidentity)
* Traversable: ❌

## General Information

The non-traversable [GH\_HasExternalIdentity](/opengraph/extensions/githound/reference/edges/gh_hasexternalidentity) edge represents the relationship between a SAML identity provider and the external identities (SSO users) it manages. Created by `Git-HoundGraphQlSamlProvider`, this edge links each external identity to the SAML provider that authenticated it. External identities are a key component in cross-platform attack path analysis because they bridge the gap between corporate identity providers and GitHub user accounts via the [GH\_MapsToUser](/opengraph/extensions/githound/reference/edges/gh_mapstouser) edge. Enumerating external identities reveals which corporate users have linked GitHub accounts and enables mapping from IdP compromise to GitHub access.

```mermaid theme={null}
graph LR
    node1("GH_SamlIdentityProvider entra-id-sso")
    node2("GH_ExternalIdentity alice\@specterops.io")
    node3("GH_ExternalIdentity bob\@specterops.io")
    node4("GH_User alice")
    node1 -- GH_HasExternalIdentity --> node2
    node1 -- GH_HasExternalIdentity --> node3
    node2 -- GH_MapsToUser --> node4
```