> For the complete documentation index, see [llms.txt](https://docs.forestall.io/fsprotect/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/fsprotect/unified-identities.md). # Unified Identities The Unified Identities module lists and shows details about matched (cross-provider) and unmatched (single-provider) objects across [`Azure`](/fsprotect/unified-identities/azure-identities.md), [`Active Directory`](/fsprotect/unified-identities/ad-identities.md), [`AWS`](/fsprotect/unified-identities/aws-identities.md), `GitHub` and [`GCP`](/fsprotect/unified-identities/gcp-identities.md) providers. The pages are divided into categories and every object shows which provider or providers they are matched with. The categories are Human, Non Human, Resources and Group.
The rules that are used to match and merge identities is in [merge rules settings](/fsprotect/settings/merge-rule-settings.md). ## Human Category The Human page provides a list of human categorized Identity objects. This page shows: **Active Directory:** `User`, `Local User` **Entra ID:** `AZ User` **AWS:** `AWS IAM User`, `AWS SSO User` **GitHub:** `GitHub User` **GCP:** `GCP User`

## Non Human Category The Non Human page provides a list of non human categorized Identity objects. This page shows: **Active Directory:** `Computer`, `Managed Service Account`, `Group Managed Service Account`, `Delegated Managed Service Account` **Entra ID:** `AZ Device`, `AZ Application`, `AZ Service Principal` **ARM:** `AZ Managed Identity`, `AZ User Assigned Identity` **AWS:** `AWS IAM Role` **GitHub:** `GitHub Application Installation` **GCP:** `GCP Service Account`, `GCP Device`, `GCP Principal`

## Resources Category The Resources page provides a list of resource categorized objects. This page shows: **Active Directory:** `Domain`, `Forest`, `Organizational Unit`, `Container`, `Certificate Authority`, `CA Certificate`, `Certificate Template`, `Group Policy Object`, **Entra ID:** `AZ SharePoint Site`, `AZ Tenant`, `AZ Administrative Unit`, `AZ Role`, `AZ Teams Messaging Policy`, `AZ Teams Meeting Policy`, `AZ SharePoint Settings`, `AZ Teams Settings`, `AZ Teams External Access Settings`, **ARM:** `AZ VM`, `AZ Subscription`, `AZ Resource Group`, `AZ Management Group`, `AZ Key Vault`, `AZ SQL Server`, `AZ ARM Role`, `AZ Managed Cluster`, `AZ VM Scale Set`, `AZ Web App`, `AZ Logic App`, `AZ Function App`, `AZ Automation Account`, `AZ Container Registry`, `AZ Storage Account` **AWS:** `AWS IAM Account`, `AWS IAM Policy`, `AWS Organization`, `AWS Organizational Unit`, `AWS Identity Center` and `AWS Permission Set` **GitHub:** `GitHub Organization`, `GitHub Repository`, `GitHub Org Role` and `GitHub Enterprise` **GCP:** `GCP Organization`, `GCP Folder`, `GCP Project`, `GCP Role`, `GCP Service Account Key`, `GCP Organizational Unit`, `GCP Workforce Identity Pool`, `GCP Workload Identity Pool`, `GCP Workforce Provider`, `GCP Workload Provider`, `GCP VM`, `GCP Customer`, `GCP KMS Key`

## Group Category The Group page provides a list of group categorized objects. This page shows: **Active Directory:** `Group`, `Local Group` **Entra ID:** `AZ Group` **AWS:** `AWS IAM Group`, `AWS SSO Group` **GitHub:** `GitHub Team` **GCP:** `GCP Group`

## Details Page The details page lists merged identities, shows exposure points and the risk score, and displays a combined list of the issues on the page. If the identity has a single provider, this page is not shown it is redirected to the object's detail page instead. If there is more than one provider, the unified identity details page opens and the unified data is listed.

### Merged Identities This section of the details page displays merged identities. Each card presents a tier label, risk score, and exposure points. Cards are selectable, and selecting a card navigates to the corresponding object's detail page for more detailed information

### Identity Issues The identity issues section lists all issues associated with the merged identities. The table can also be filtered by provider using the filter on the right.

## Filters This page's filter lets you filter objects. Changes are applied directly. **Providers:** This part of the filter is used to select the providers and entity types to be listed. **Accounts:** This filter is used to filter for multi-provider objects, single-provider objects, or all objects. In the Providers filter, all selectable providers are listed. This list can be collapsed to reveal the entity types of the providers.

If the entity types are deselected, or only some of them are selected, the filter provides detailed information about the providers and entity types that will be listed.

Filters can be deselected easily from the cross button on the right.

A detailed usage is shown below:

{% content-ref url="/pages/euhDlS7Orm5UHweIr782" %} [Merge Rule Settings](/fsprotect/settings/merge-rule-settings.md) {% endcontent-ref %}