# Useroam Connector

**Useroam Connector** is a small Windows application installed inside the organisation's own network. When a staff member enters their username and password on the setup page, **the password is verified through this connector**. It is never sent to the panel and never stored there.

> **Where do I get it?** The **Download the Connector app (Windows)** button on the **Staff WiFi → Status** card. Direct address: `https://panel.useroam.com/api/connector-download.php`

---

## 1. Where it is installed

On a **Windows machine inside the company network**. That machine must be able to reach the directory server (Active Directory / LDAP) used for authentication. The connector's public IP address does **not** have to match the device's IP registered in the panel — the connector proves its identity with a key issued to it, not with its address.

---

## 2. What it does

- **Password verification.** When a staff member types their password on the setup page, the request goes to the connector, the connector asks the directory, and the answer comes back.
- **User sync.** Active Directory / LDAP users are copied into the panel and appear in the **Staff and certificate status** list. Groups are copied too. **Passwords are not.**
- **Status reporting.** The connector checks in with the panel regularly; that is where **Last seen** comes from.

---

## 3. The three states

- **Online** — the connector is reaching the panel. Staff can run the setup.
- **Offline** — the connector is registered but has not checked in recently. **Staff cannot finish setup**; there is nothing to verify the password against. Check that the machine is switched on and has internet access.
- **Not installed** — no connector has ever been registered for this device.

While the connector is offline **no new setup can be completed**; there is no password to check against. Devices that already hold a certificate are authenticated by **that certificate**, and this check does not go through the connector. Even so, do not leave the connector down for long: user sync stops as well.

---

## 4. Organisations without Active Directory

Neither the connector nor a directory is mandatory. **Local users** created by hand in the panel can also receive certificates; in that case the password is checked against the panel's own user records. When you create the user, set the type to **Staff WiFi (certificate)** — see **Inviting staff**.

---

> **Related pages:** **Staff Wi-Fi Administration → Settings and status**; **Guests → New User**.