QEHS EthosEHS Ethos

Integrations / Identity & SSO

Generic SAML 2.0

Any SAML 2.0 provider.

Identity & SSOGenerally availableEnterprise only

Connect any SAML 2.0 IdP — including on-prem ADFS, PingIdentity, Shibboleth, or legacy tenants — with full metadata import.

Capabilities

  • Metadata XML import
  • Signed + encrypted assertions
  • IdP-initiated + SP-initiated flows

Setup steps

  1. Enable the Generic SAML 2.0 connector in Settings → Integrations.
  2. Copy the QEHS metadata URL and paste it into your IdP application.
  3. Map user attributes to the required QEHS claims.
  4. Test the connection with a sandbox user.
  5. Enable for all users and verify provisioning logs.

Every integration is auditable

HMAC-signed webhooks, OpenAPI 3.1, SDKs in every major language.

Integrations layer sits on top of the same audit log your security team already reviews, nothing bypasses the tenant boundary.

Generic SAML 2.0 integration | QEHS Ethos