feat: Add Synced Identities section to AD and Azure User entity panels

[julian1j]

Description

Surfaces SyncedToEntraUser and SyncedToADUser edges in the entity info panel as a collapsible "Synced Identities" section. Uses generic naming to accommodate future OpenGraph identity sync extensions.

Motivation and Context

Resolves #2682

It is not always obvious that a user has a corresponding synced "identity" in another platform; the only place this is currently displayed is from the "On Prem Sync Enabled" property on Azure users. This lets users of BloodHound easily identify the synced user and view both at once on the graph without the use of pathfinding or cypher. Additionally, this should be expanded in the future to accommodate additional synced users in OpenGraph extensions.

How Has This Been Tested?

Tested using a locally built CE with the example AD and Azure data available from SpecterOps.

• Verified "Synced Identities" section appears on AD User entity panel
• Verified "Synced Identities" section appears on Azure User entity panel
• Expanding the section successfully returns the user nodes and connecting edge in the graph, when a synced user is present
• Non-synced users show a count of 0.

Screenshots (optional):

Types of changes

• New feature (non-breaking change which adds functionality)

Checklist:

• I have met the contributing prerequisites
  • Assigned myself to this PR
  • Added the appropriate labels
  • Associated an issue: Issues and Pull Requests README #672
  • Read the Contributing guide: https://github.com/SpecterOps/BloodHound/wiki/Contributing
• I have ensured that related documentation is up-to-date
  • Open API docs
  • Code comments (GoDocs / JSDocs)
• I have followed proper test practices
  • Added/updated tests to cover my changes
  • All new and existing tests passed

Summary by CodeRabbit

• New Features

  • Added a new “Synced Identities” section for Azure and Active Directory users in the UI.
  • Introduced an API endpoint to list a user’s synced identities (with support for graph and list modes), surfaced in the client with pagination.

• Bug Fixes

  • Updated related-entity handling so synced identities resolve consistently across both graph and list views.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro

Run ID: 8cbb15d1-e285-49ca-8bfc-ae98170d8e76

📥 Commits

Reviewing files that changed from the base of the PR and between 25366ea and be0e3f6.

📒 Files selected for processing (1)

• packages/javascript/bh-shared-ui/src/utils/content.ts

🚧 Files skipped from review as they are similar to previous changes (1)

• packages/javascript/bh-shared-ui/src/utils/content.ts

---

📝 Walkthrough

Walkthrough

Adds synced identities support to AD and Azure user panels, including traversal helpers, API routes and handlers, related-entity lookups, and shared UI/client endpoints.

Changes

Synced identities user panels

Layer / File(s)	Summary
Graph criteria and traversal helpers packages/go/analysis/azure/model.go, packages/go/analysis/ad/filters.go, packages/go/analysis/ad/queries.go	Adds the synced-identities related-entity constant, graph criteria, and outbound traversal helpers for paths and terminal nodes.
Azure DB lookups packages/go/analysis/azure/db_ops.go	Adds read-transaction helpers that resolve an entity by objectID and fetch synced-identity paths or nodes.
AD user route and handler cmd/api/src/api/registration/v2.go, cmd/api/src/api/v2/ad_related_entity.go	Registers the synced-identities user route and wires it to the AD related-entity query handler.
Azure related-entity cases cmd/api/src/api/v2/azure.go	Adds graph and list cases for the synced-identities related-entity type in Azure related-entity handling.
UI sections and client wiring packages/javascript/bh-shared-ui/src/utils/content.ts, packages/javascript/js-client-library/src/client.ts	Adds Synced Identities sections for Azure and AD users, the endpoint handlers, and the V2 client method.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~25 minutes

Possibly related PRs

• SpecterOps/BloodHound#2892: Modifies the same Azure related-entity dispatch flow in cmd/api/src/api/v2/azure.go.

Suggested labels

api, user interface, javascript, go

Suggested reviewers

• AD7ZJ

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 7.14% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly summarizes the new Synced Identities section for AD and Azure user panels.
Description check	✅ Passed	The description follows the template with description, motivation, testing, screenshots, types, and checklist sections.
Linked Issues check	✅ Passed	The changes implement the requested Synced Identities accordion for AD and Azure users and expose the synced-user graph relationships.
Out of Scope Changes check	✅ Passed	The diff stays focused on the synced-identities feature across API, analysis, and UI layers with no clear unrelated additions.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}