> ## Documentation Index
> Fetch the complete documentation index at: https://syteca.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Connect Using a Secret

> Connect to a privileged account with a Syteca secret in the Desktop or Web Connection Manager, across Active Directory, Windows, Unix, Web, and MS SQL accounts.

Once a secret exists and you have permission to use it, you connect to the privileged account through a Connection Manager — the credential is injected for you, never shown. This page covers connecting in the Desktop Connection Manager and the specifics for each account type.

<Info>
  Everything here also works from the Management Tool using the [Web Connection Manager](/docs/pam/access/web-connection-manager), in a similar way.
</Info>

<Note>
  As a root user, the built-in default **admin** user has the **Owner** [Role Type](/docs/pam/secrets/permissions) for all secrets and can access every secret added by other users.
</Note>

## Connect in the Desktop Connection Manager

<Steps>
  <Step title="Sign in to the Client computer">
    Log in to the computer running the Connection Manager, remotely or locally. If [secondary user authentication](/docs/administration/clients/parameters/secondary-user-authentication) is enabled, enter the secondary user's credentials.
  </Step>

  <Step title="Open the Connection Manager">
    Right-click the **Client** tray icon and choose **Remote Access**, or double-click the **Syteca Remote Access** desktop icon.

    <Note>
      With a custom Windows shell, the Remote Access shortcut may not be on the desktop. Find it in `C:\Users\Public\Desktop`.
    </Note>
  </Step>

  <Step title="Find your secret">
    The Connection Manager shows the secrets and folders you have [permission](/docs/pam/secrets/permissions) to use. Click **Refresh** any time to update the list. The **Details** column shows status for access approval, [Password Checkout](/docs/pam/secrets/password-checkout), and recording — the same statuses described in [View and manage secrets](/docs/pam/secrets/view-manage-secrets).
  </Step>

  <Step title="Connect">
    Click the secret, then **Connect**. Request access approval if prompted.
  </Step>

  <Step title="Enter the computer (Active Directory only)">
    For an Active Directory account secret, enter the **Computer** name or IP in the pop-up, then click **Connect**.

    <Note>
      If the secret only allows specific computers in the domain, expand the parent secret (click the down-arrow) to show one child secret per allowed computer, then select the child and click **Connect**.
    </Note>
  </Step>
</Steps>

A connection is established according to the [secret type](/docs/pam/secrets/add-secret) and you're logged in to the account automatically.

<Note>
  A watchdog for the Connection Manager provides automatic recovery in case of failure.
</Note>

## Per-account-type notes

Each secret type connects to its kind of account, and most require a third-party application on the Connection Manager computer.

<Tabs>
  <Tab title="Active Directory">
    Lets you choose which computer to connect to in the domain. Requires **Microsoft Remote Desktop Connection** (`mstsc.exe`). After **Connect**, enter the computer name or IP; Syteca logs you in automatically.
  </Tab>

  <Tab title="Windows">
    Works with local and domain accounts on a specific computer. Requires **Microsoft Remote Desktop Connection** (`mstsc.exe`). Syteca logs you in automatically on **Connect**.
  </Tab>

  <Tab title="Unix (SSH)">
    Connects to a Unix account over SSH. Requires **PuTTY**. The **Use SSH key** option can be selected instead of a password when [adding the secret](/docs/pam/secrets/add-secret). Syteca logs you in automatically on **Connect**.
  </Tab>

  <Tab title="Unix (Telnet)">
    Connects to a Unix account over Telnet. Requires **PuTTY**. The **Use SSH key** option can be selected instead of a password when [adding the secret](/docs/pam/secrets/add-secret). Syteca logs you in automatically on **Connect**.
  </Tab>

  <Tab title="Web">
    Connects to a web account. Only compatible with **Google Chrome**, and always opens in **Incognito** mode (no data caching). If auto-login doesn't happen, a Syteca Chrome extension can insert the username and password.
  </Tab>

  <Tab title="MS SQL">
    Connects to an MS SQL database. Requires **Microsoft SQL Server Management Studio (SSMS) 18–20**. Syteca logs you in to SSMS automatically on **Connect**.
  </Tab>
</Tabs>

<Frame caption="The Desktop Connection Manager showing available secrets.">
  <img src="https://mintcdn.com/syteca/FKrkO8bEqEQ6WSgs/images/pam/secrets/desktop-connection-manager.png?fit=max&auto=format&n=FKrkO8bEqEQ6WSgs&q=85&s=028be3c2c434ba2c44f4338ed4c162a3" alt="Syteca Desktop Connection Manager listing available secrets" width="1228" height="643" data-path="images/pam/secrets/desktop-connection-manager.png" />
</Frame>

## Per-secret actions

If you have the right [advanced permissions](/docs/pam/secrets/permissions), each secret row also lets you:

* [Copy or view the password](/docs/pam/secrets/view-copy-password) (after confirming your account password).
* [Transfer files](/docs/pam/secrets/file-transfer) with WinSCP (dark blue icon; a gray icon means it isn't fully configured).

## Choose which columns are shown

Click **Columns Display** (bottom right of the Connection Manager) and select or clear columns. The **Secret Name** column can't be hidden.

## Add your own private secrets (WPM)

Click **Add Secret** at the bottom of the Connection Manager to add and manage your own [Workforce Password Management](/docs/pam/secrets/workforce-password-management) secrets — private to you unless you share them.

## Related

<CardGroup cols={2}>
  <Card title="Web Connection Manager" icon="globe" href="/docs/pam/access/web-connection-manager">
    Connect from the browser or locally, via the Management Tool.
  </Card>

  <Card title="View and manage secrets" icon="folder-tree" href="/docs/pam/secrets/view-manage-secrets">
    The secrets grid, columns, and Details statuses.
  </Card>

  <Card title="Password checkout" icon="user-lock" href="/docs/pam/secrets/password-checkout">
    What the Checked out / Requires checkout statuses mean.
  </Card>

  <Card title="Workforce Password Management" icon="user-cog" href="/docs/pam/secrets/workforce-password-management">
    Manage your own private secrets.
  </Card>
</CardGroup>
