Integrations
Crow HR is designed to run without any external service. Everything below is optional and configured by you.
Available
Section titled “Available”| Integration | How | Guide |
|---|---|---|
| Google Workspace sign-in | OpenID Connect | Google Workspace |
| Microsoft Entra ID sign-in | OpenID Connect, single tenant | Microsoft Entra ID |
| Okta, Keycloak, Authentik and other OIDC providers | OpenID Connect with discovery | Generic OIDC |
| Singpass login | FAPI 2.0 profile; needs your own relying-party onboarding; tested against Singpass staging, not production yet | Singpass |
Any SMTP server (SMTP_URL, MAIL_FROM) |
Configuration | |
| CPF Board | CPF EZPay (FTP) file, uploaded by you | CPF EZPay file |
| Banks | Generic ISO 20022 pain.001.001.03 file, uploaded by you |
Bank file |
| IRAS | IR8A rows for IRAS’s import template, imported by you in myTax Portal | IR8A export |
| Spreadsheets | CSV import of employees, compensation and YTD balances; CSV/XLSX export of employees; CSV export of the audit log | Importing |
| Your own tools | The REST API used by the web app, documented in OpenAPI | API reference |
Uploaded files are stored on the server’s disk in the data volume (FILE_STORAGE_DIR, default /data/files) and included in every backup. Object storage such as S3 is not supported. The core receives file storage as an injected dependency, so another backend can be added later without changing modules.
API access for integrations
Section titled “API access for integrations”The API authenticates browser sessions (cookie) and native-app tokens (bearer, from the native sign-in flow). There are no API keys or service accounts for server-to-server integrations yet. See API conventions.
Not available
Section titled “Not available”- IRAS AIS API (direct IR8A submission): requires IRAS to approve the software as a vendor, Corppass authorisation, APEX credentials and whitelisted servers.
- Direct CPF submission: you upload the EZPay file in CPF’s portal.
- Bank-specific formats and bank APIs (DBS, OCBC, UOB and others): only the generic ISO 20022 file exists, untested with any bank.
- Myinfo: Singpass login requests only
openid; no personal data is retrieved from Myinfo. - MOM systems (work pass applications, levy billing).
- Accounting exports (journal entries, GL codes), calendar feeds, webhooks, Slack or Teams notifications.
- Push notifications to phones: the planned mobile apps would use in-app inbox and local notifications first.