🛠️ Payroll on your platform

Standalone As A White-Label Solution

Ason Embedded Payroll can be used not only as an API integrated into your platform, but also as a fully functional standalone payroll solution - branded and operated as your own product.

This allows you to offer payroll to your customers without building your own frontend or backend, while maintaining full control over user experience and branding.

---

How it Works

Ason provides two core components:

1. Payroll Engine (API-first)

Ason's payroll engine is exposed via a REST API.

It handles:

• Payroll calculations
• Regulatory logic
• Reporting and compliance

The API can be connected to any platform or used independently.

2. Ready-to-Use Frontend (React UI)

Ason provides a fully functional, open-source payroll UI (React-based), available on GitHub - see Build your own solution.

This UI includes:

• Payroll processing workflows
• Employee and contract management
• Reporting and payslips

---

Identity & Access Management (IAM)

To provide a seamless user experience, Ason can be integrated with your existing Identity & Access Management (IAM). There are two implementation options, depending on your product architecture and roadmap.

Option 1: Managed Backend Gateway

Your platform fully controls user access and routing.

How it works:

• The user logs into your platform
• Your backend manages the Ason tenants
• Your backend connects to Ason via a system user
• The correct tenant is opened for the user automatically
• The user is routed directly into the white-labeled payroll UI

Result: The user sees the correct payroll environment without any additional login.

Recommended if you later want to embed payroll directly into your product.

Code
User  ──obtains token──►  YOUR IAM
         │
         ▼ authenticates with token
      YOUR Backend
         │
         │  – use System User Token (Zitadel M2M, see below)
         │  – permissions are handled by YOU
         ▼
   Ason Payroll API  ──validate token──►  Ason IAM
         │
   Ason PROD Instance *

Setup 1 (Recommended): Dedicated Ason instance in Ason's Azure environment.
Setup 2: Start on the Ason instance and migrate to a dedicated instance later (additional effort required).

---

Option 2: Direct IAM Integration

Your IAM directly controls access to payroll.

How it works:

• Ason provides a dedicated Azure instance
• Your IAM is directly connected to the payroll system
• User access and permissions are managed by setting up Ason users in YOUR Ason PROD instance

Result: A fully integrated authentication setup with centralized user management.

Requirements: Dedicated Ason PROD instance on Ason's Azure environment required.

Code
User  ──obtains token──►  YOUR IAM
         │                    │
         ▼ authenticates      ▼ validate token
      Ason Payroll API ◄──► YOUR Backend
      (configured to          │
      validate token          ▼ set up of the Ason users
      with YOUR IAM)      (with permissions) and tenants
         │
   YOUR Ason PROD Instance

---

Typical User Flow (valid for Option 1 & 2)

1. User logs into your platform
2. User clicks "Go to Payroll"
3. User is directly routed into the white-labeled payroll UI
4. Payroll is fully accessible → no additional login required

---

Summary & Next Step

With Ason, you can launch a white-label payroll solution quickly, choosing between the two IAM integration options above depending on how much control you need over user access.

Ready to try it? Head to the Quickstart to test the sandbox environment.

Looking for a deeper, API-first integration instead? See Embedded Into Your Platform.