Branding & User Access

Everee White Label is designed to enable you to offer payroll and payment processing under your own brand and consistent with your existing processes for how users access your products. This approach helps ensure that it feels like a familiar part of your product portfolio.

Branding Options

The whole Everee White Label experience can be customized with your branding, including admin-facing management UI, worker-facing onboarding and portal UI, emails, notifications, and more. For example, here's what an Everee White Label screen looks like under sample branding:

Your Partner Success manager will work with you to obtain your business or product-line logo in different sizes so we can attach it to your Everee White Label application experience properly. We'll help your designers evaluate how your logo displays inside the White Label experience to make sure it's clear, recognizable, and accessible. We require logos in SVG format with a transparent background.

Your White Label platform will be available under a custom domain or subdomain to maintain branding consistency, such as boomerangpay.com or payroll.boomerang.com. We'll work with your engineers to make sure DNS is configured correctly.

User Access

The way your customers access your White Label platform is an important part of presenting a seamless connection between your platform and ours. The two main approaches for controlling your access are Hosted Auth and Single Sign On (available later in 2023). This section contains details on both approaches.

Hosted Auth

In this model, we act as the source of truth for user accounts, and the sign-in experience is managed by your Everee White Label platform.

Provisioning new user accounts for your customers' administrators happens within your White Label platform in this approach, but you can still create and onboard your customers' workers via integrations with Everee Embed Components and APIs, and if you currently offer (or want to offer) a worker-facing portal in your platform, you can use Embed Components to integrate worker-facing payroll or payment processing there as well.

In the Hosted Auth model, we display a sign-in screen under your branding, and your customers' admins and workers both sign into your White Label platform using that screen. Your platform can "kick off" a new White Label session by simply linking to https://[your White Label domain]/login.

This is an example of the branded sign-in screen users will see when accessing your White Label platform using the Hosted Auth model:

Single Sign-On (coming later in 2023)

In this model, your platform acts as the source of truth for user accounts. We'll connect to the SSO identity provider (or "IdP") you operate and use it as the authority for authentication when your platform requests user access.

We currently support the SAML and OpenID Connect protocols for SSO connections. Other options may be available depending on your use-case and technology—talk to your Partner Success manager to discuss options.

In order to configure SSO between your platform and ours, we will typically require information from your engineering team, including:

a valid endpoint URL to begin the authorization flow (i.e. your SAML ACS URL)
signing certificate(s) appropriate for your IdP
a configuration for mapping data attributes in your IdP responses
other details specific to the SSO protocol you've chosen

Your Partner Success manager will help you configure your SSO connection.

📘
User access in sandbox and production
Your User Access approach will always be configured in your sandbox instance and validated before you can "promote" it to production. This allows both of our teams to validate the configuration is correct and ensure there's no disruption to your users' access.