A Windows agent in each site reads your eSSL and ZKTeco terminals over the LAN every 10 minutes and pushes punches here over HTTPS.
Your account sets the scope — the whole platform, or one client’s offices.
Office PCs do not sign in here. They authenticate with a site key issued on the Integration screen.