QEHSmobile
MDM deployment and config
Pre-configuring the QEHS mobile app at scale via Managed App Config. Push tenant slug, region, SSO hints, and signing certificates.
6 min read · 2 sections
Managed app config keys
| Key | Type | Purpose |
|---|---|---|
| tenantSlug | string | Pre-fill tenant identifier |
| region | string | US | EU | UK | AU | CA | AE |
| ssoProvider | string | Optional IdP hint |
| allowedEmailDomain | string | Block non-corporate accounts |
| disableScreenshots | boolean | Prevent screenshots of sensitive data |
| offlineRetentionDays | number | Override default 30-day cache |
| jailbreakPolicy | string | block | warn | allow |
Deployment patterns
- Fully managed corporate devices — push the app silently, config pre-applied, users sign in with SSO.
- BYOD with MAM — app-protection policies enforced without device management.
- Shared devices (warehouses, clinics) — rotating kiosk accounts, PIN-per-record for attribution.
- Frontline kiosk mode — Android dedicated-device / iOS Guided Access locks to QEHS only.