In this Section:

• Retrieve Values from Microsoft Entra
• Test the Integration
• Important Notes
• Trouble-Shooting

Retrieve Values from Microsoft Entra

You will now need to retrieve the following credentials from Microsoft Entra:

• Client ID
• Tenant ID
• Client Secret Key

Please follow Stage 1, Stage 2 and Stage 5 in the separate linked article for a guide on how to fetch these credentials and enter them into SELMA.

Note: Please return to this article and read on once you have completed Stages 1-3, as linked above.

Test the Integration

Once the SELMA team have configured the integration, Users should log out of their accounts, and sign-in using the “Microsoft” button.

Login with Microsoft | SELMA Login Screen

On the SELMA login screen, click the “Microsoft” button to sign in immediately.
Note: You may be redirected to a page to select a Microsoft account, if you have multiple.

Important Notes

• Setup Process:
  • The Entra App set-up is done by your organisation, but the SELMA integration is configured by the SELMA team.

• Credentials Security:
  • Store your Client ID, Tenant ID, and Client Secret Key securely before sending them to the SELMA team.

• Email Matching:
  • Users must have the same email address in both SELMA and their Microsoft account for the login process to work.

• Secret Expiry:
  • Remember to renew your Client Secret Key before it expires, and provide the new secret to the SELMA team.

Trouble-Shooting

• “Invalid client” error:
  • Check that the correct Application ID, Directory ID, and Client Secret were provided to the SELMA team

• “Redirect URI mismatch”: Ensure the redirect URL in Entra exactly matches the format
  • https://subdomain.selma.app/connect/azure/check

• Secret expiry issues:
  • If authentication suddenly stops working, check if the client secret has expired in Azure

Note: Individuals with administrator access to your Microsoft tenancy should follow the steps below.

In this Section:

Setting up the integration involves four stages:

• Stage 1 — Register an Application in Microsoft Entra
• Stage 2 — Add a Client Secret
• Stage 3 — Redirect URL
• Stage 4 — Configure API Permissions
• Stage 5 — Connect the Integration in SELMA
• Set-Up Complete
• Two-Way Communications

Stage 1 — Register an Application in Microsoft Entra

Figure 1i. Navigate to Homepage > App Registrations

Go to the Microsoft Entra portal homepage: https://entra.microsoft.com/#home
Then, add a new registration.

Figure 1ii. Add a Name and Link an Account Type

Name the application something identifiable, such as “SELMA M365 Integration”. All remaining fields can be left at their default values. Click Register.

Figure 1iii — Save IDs and Fetch Client Secret Key

Once you have added a new registration, you will be taken back to the App Overview page, where you should note the Application (client) ID and Directory (tenant) ID. You will need these in Stage 4.
Note: you will need to fetch a client secret key (red), which will be explained further in the next step.

Stage 2 — Add a Client Secret

Figure 2i. Navigate to the Certificates and Secrets Page

Click the button “+ New client secret”.
Note: You will have reached this page from the last step.

Figure 2ii. Define the Client Secret

Enter a name and set an expiry duration, then click Add.
Important: Set a reminder to create a new secret before it expires. Update the secret in SELMA before the expiry date to avoid any disruption.

Figure 2iii. Save the Client Secret Key

Copy the secret value immediately — it will not be displayed again after you navigate away or refresh the page. You will need this value in Stage 4.
Note: If you can no longer copy the secret value, delete it and repeat Stage 2 from the beginning.

Stage 3 — Redirect URL

Figure 3i. Navigate to the Overview Page and Add Redirect URL

Return to the “Overview” page and click “Add Redirect URL“.

Figure 3ii. Select a Platform

Click “Add Redirect URL” and select the “Web” option.

Figure 3iii. Provide the Redirect URL and Click “Configure”

You’ll be asked to enter the Redirect URL now. Back in SELMA, you can copy the Redirect URL from the Integration Configuration page (please see the next step).

Figure 3iv. Copy the Redirect URL from SELMA

Navigate to Settings > Integrations > Microsoft 365, and expand the User-Level Configuration section. Then, copy the Redirect URL to paste back in your Microsoft account.

Stage 4 — Configure API Permissions

Figure 4i. Navigate to Microsoft Graph

Within the same app, click API Permissions → Add a permission → Microsoft Graph.

Figure 4ii. Select the User.ReadBasic API Permission

Select Application permissions (this allows the integration to send emails on the users behalf). Then, search for and add User.ReadBasic.All permission. This validates access to your designated mailbox.

Figure 4iii. Select the Mail.Send API Permission, and Add All

Figure 4iv — Select the Mail.ReadWrite API Permission, and Add All

Search for and add the Mail.ReadWrite permission. This enables replies to emails leaving SELMA to appear in SELMA. Finally, add all permissions (green).

Figure 4v. Grant Admin Consent

Once all permissions are added, click Grant admin consent to approve them for your organisation.
Note: You will only be able to click this button if you are an admin or have the correct permissions, which is managed by your IT team.

Stage 5 — Connect the Integration in SELMA

Figure 5i. Navigate to Integrations > Settings

On your SELMA instance, go navigate to Settings (cog icon, top-right) > Integrations.

Figure 5ii. Select Microsoft 365 Integration

Click the “Configure” button, below Microsoft 365.

Figure 5iii. Update User-Level Configuration

Click to expand the User-Level Configuration section, and enter the three values saved from Stages 1 and 2: Tenant ID and Client ID – Figure 1iii, and Client Secret Key – Figure 2iii.

Figure 5iv. Link Microsoft Integration to your Profile

Navigate to your Profile (click the top-right profile picture icon), and click the “Link Microsoft 365” button (orange). This will guide you through your usual Microsoft login process, and ask you to authorise the requested permission. Once authorised, you’ll be redirected back to SELMA, where you will see a success message.

Set-Up Complete

The integration is now fully configured. This means you can send emails within SELMA from your validated mailbox address.

Two-Way Communications

This feature allows you to see an email thread of correspondence within SELMA, which can be accessed from the Student Profile > Events tab.

• Please contact SELMA Support to enable this feature as part of your Microsoft Integration Plan.

Figure 6. Navigate to Students > Events Tab

Note: Individuals with administrator access to your Microsoft tenancy should follow the steps below.

In this Section:

Setting up the integration involves four stages:

• Stage 1 — Register an Application in Microsoft Entra
• Stage 2 — Add a Client Secret
• Stage 3 — Configure API Permissions
• Stage 4 — Connect the Integration in SELMA
• Set-Up Complete
• Two-Way Communications

Stage 1 — Register an Application in Microsoft Entra

Figure 1i. Navigate to Homepage > App Registrations

Go to the Microsoft Entra portal homepage: https://entra.microsoft.com/#home
Then, add a new registration.

Figure 1ii. Add a Name and Link an Account Type

Name the application something identifiable, such as “SELMA M365 Integration”. All remaining fields can be left at their default values. Click Register.

Figure 1iii — Save IDs and Fetch Client Secret Key

Once you have added a new registration, you will be taken back to the App Overview page, where you should note the Application (client) ID and Directory (tenant) ID. You will need these in Stage 4.
Note: you will need to fetch a client secret key (red), which will be explained further in the next step.

Stage 2 — Add a Client Secret

Figure 2i. Navigate to the Certificates and Secrets Page

Click the button “+ New client secret”.
Note: You will have reached this page from the last step.

Figure 2ii. Define the Client Secret

Enter a name and set an expiry duration, then click Add.
Important: Set a reminder to create a new secret before it expires. Update the secret in SELMA before the expiry date to avoid any disruption.

Figure 2iii. Save the Client Secret Key

Copy the secret value immediately — it will not be displayed again after you navigate away or refresh the page. You will need this value in Stage 4.
Note: If you can no longer copy the secret value, delete it and repeat Stage 2 from the beginning.

Stage 3 — Configure API Permissions

Figure 3i. Navigate to Microsoft Graph

Within the same app, click API Permissions → Add a permission → Microsoft Graph.

Figure 3ii. Select the User.ReadBasic API Permission

Select Application permissions (this allows the integration to send emails on the users behalf). Then, search for and add User.ReadBasic.All permission. This validates access to your designated mailbox.

Figure 3iii. Select the Mail.Send API Permission, and Add All

Figure 3iv — Select the Mail.ReadWrite API Permission, and Add All

Search for and add the Mail.ReadWrite permission. This enables replies to emails leaving SELMA to appear in SELMA. Finally, add all permissions (green).

Figure 3v. Grant Admin Consent

Once all permissions are added, click Grant admin consent to approve them for your organisation.
Note: You will only be able to click this button if you are an admin or have the correct permissions, which is managed by your IT team.

Stage 4 — Connect the Integration in SELMA

Figure 4i. Navigate to Integrations > Settings

On your SELMA instance, go navigate to Settings (cog icon, top-right) > Integrations.

Figure 4ii. Select Microsoft 365 Integration

Click the “Configure” button, below Microsoft 365.

Figure 4iii. Update Account-Level Configuration

Expand the Account-Level Configuration section and enter the three values saved from Stages 1 and 2: Tenant ID and Client ID – Figure 1iii, and Client Secret Key – Figure 2iii.

Figure 4iv. Check Connection and Validate Mailbox

Test the connection to confirm the credentials are valid. Then, click the Mailbox Set-up to enter and validate the email address(es) you wish to send communications from in SELMA. Finally, send a test email to confirm everything is working end-to-end.
Note: If any of the tests and validations fail, please enquire with SELMA Support.

Set-Up Complete

The integration is now fully configured. This means you can send emails within SELMA from your validated mailbox address.

Two-Way Communications

This feature allows you to see an email thread of correspondence within SELMA, which can be accessed from the Student Profile > Events tab.

• Please contact SELMA Support to enable this feature as part of your Microsoft Integration Plan.

Figure 6. Navigate to Students > Events Tab

Note: Please contact SELMA Support to include this paid feature in your subscription plan.

In this Section:

• Upload the WordPress Plugin
• Fetch API User and API Key
• WordPress PlugIn Configuration

Upload the WordPress Plugin

Before you proceed with the following steps, please contact SELMA Support to provide you with the relevant WordPress zip file.

Figure 1i. Add Plugin

On the left-hand panel, navigate to “Plugins” and select “Add Plugin”.

Figure 1ii. Upload Plugin

Figure 1iii. Install WordPress Plugin

Click the “Install Now” button once you’ve uploaded the zip file.

Fetch API User and API Key

Log a support ticket and request from one of our SELMA staff to create an API user for you. Then, navigate back to SELMA and follow the steps, below:

Figure 2i. Navigate to Settings > API

Figure 2ii. API User and Secret API Key

On the API Users tab, copy and save your API user name somewhere secure; then, generate a new API key (orange).
Note: You must click the checkbox, then click “regenerate” to generate a new API key.

Figure 2iii. Copy API Key

Copy the API Secret Key to your clipboard (green), and store it somewhere secure.

WordPress PlugIn Configuration

Figure 3. Navigate to Plugins > Installed Plugins

Figure 4. Enter API User and API Key

Figure 5. Enter Short-Code/s on a Post

Navigate to a WordPress post which constitutes your website. Then past the following Short Code parameters to render the appropriate SELMA Intakes onto your website:

• To show all available Intakes:
  • selmasis (in square brackets)

• To show Intakes with a specifc Campus ID (e.g. 12) and Programme ID (e.g. 76)
  • selmasis campus=12 programme=76 (in square brackets)

• To show Intakes with a specific Programme ID (e.g. 76)
  • selmasis programme =76 (in square brackets)

Link Intakes to WordPress Site

Navigate back to SELMA and fill out the following fields on the Intake tab of the Intake profile page.

Figure 6. Update Intake Tab Fields

Customise Website Display

The WordPress Integration has a default HTML script and CSS.
If you wish to customise the display follow the steps, below:

Figure 7i. Navigate to Settings > Integrations

Figure 7ii. Select WordPress Configuration

Figure 7iii. Edit Default HTML and CSS

In this Section:

• Stripe Configuration
• Stripe Activation – Form Manager
• Discount Codes

Stripe Configuration

Figure 1. Navigate to Settings > Integrations

Figure 2. Select the Stripe Integration

Scroll to find the “Stripe” Integration, and click “Configure” to select it.

Figure 3i. Navigate to Stripe Dashboard

Please navigate to your Stripe Account, and click “Developers” on the bottom left of your dashboard screen.

Figure 3ii. Copy API Keys

Copy the indicated API keys to paste into SELMA, in the subsequent step.

Figure 3iii. Add API Keys

Paste the Publishable Key and Secret Key URL tokens from Stripe into SELMA. You will need to click “Change” to edit the page, first.

• Note: Once you have pasted the API Keys into SELMA, remember to click “Save”, (this button appears after editing).

Figure 4. Configure SELMA Webhook URL

Create a SELMA Webhook URL. This will be the Endpoint URL you enter into Stripe.

• Note: The Webhook Signing Secret Key will be auto-generated when you click “Save”.

Stripe Activation – Form Manager

The following identifies how the Stripe Integration works on the Form builder:

Figure 5i. Navigate to Settings > Form Manager

Figure 5ii. Select an Enrolment Form

Click to edit an Enrolment form, and access the Form Builder.

Note: Only an Enrolment form can be embedded with a payment gateway, such as Stripe.

Figure 5iii. Payment and Notifications

Configure the Stripe Payment settings on the left, making sure that you activate the payment (top, red), and save your changes (purple). Select the Users you want to send notifications to, on form submission or payment, on the right (orange).

Discount Codes

Intake tutition fees can be discounted if Student applicants are given a valid discount code to use on payment, before submission.

Figure 6i. Navigate to Settings > Finance > Discount Code

Figure 6ii. Create a Discount Code

Figure 6iii. Provide Details and Activate Code

Fill in the required fields, as indicated by red asterisks, and make sure to activate the Discount Code, if you want it to be used by applicants.

Note: The Discount Code is only valid (functional) during the period you indicate, here.

Figure 6iv. Navigate to the Intake

Navigate the Student Portal

The following sections describe how you should upload documents, view your submissions and review other details on your Student record.

Upload Documents

Upload documents, such as assessments, against Enrolment Components, as indicated in the steps below.

Figure 1. Open an Enrolment

Click the blue highlighted text to open an Enrolment; (you can also select an Enrolment from the Enrolments tab (orange)).

Figure 2. Upload Documents to an Enrolment Component

Figure 3. Import Files from Your Computer

View Personal Information

Review details against your Student profile.

Figure 4. Student Tab

On the Student tab, you can see your Personal Details, including your Names, Country of Birth, Date of Birth, and Addresses. On the right, you will see your Latest Enrolments and Recent Events, which are communications sent by your education provider.

View Form Submissions

The Submissions tab will show forms that you have completed in the past, or that which you are currently filling-out.

Figure 5. Submissions Tab

If you have completed a form, or saved it to complete later, you can view or access it again, respectively, on the Submissions tab.

View Contacts

View information about the Contacts associated with you. These details will have been captured by your form.

Figure 6. Stakeholders Tab

The Stakeholders tab holds information about your related Contacts. Click a card to flip it and reveal more details. Icons on the front of the card indicate if a Contact is listed as a Primary Contact (star), Emergency Contact (ambulance), and CCed in all communications (speech bubble) sent to you by your education provider.

View Timetable Sessions

Figure 7. Timetable Tab

See your scheduled Timetable sessions on the Timetable tab.

View Events

Events are communications sent to you by your education provider.
While you can see a quick overview of communications on the Student Tab, you can see a list of all communications on the Events tab.

Figure 8. Events Tab

View a list of communications from your education provider on the Events tab.

• Please reach out to SELMA Support for enquiries about this subscription.

In this Section:

• Portal Configuration
• Student Impersonation

Portal Configuration

Only Users assigned with the Role: Primary User can enable Portal settings.

• Please contact SELMA Support to assign Primary Users, bearing in mind this Role grants access to SELMA entirely.

Figure 1i. Navigate to Settings > Portal Admin

Figure 1ii. Toggle Student Portal

Please note: the Portal Configuration area allows you to enable multiple settings, such as how the Student signs-in to the Portal, via Microsoft and Google Single Sign-Ons, and what the Student sees on the Portal, such as their Addresses and Attendance. You can also allow Students to add information to their profile.

Figure 1iii. Enable Grade Attempt Submissions

Please note, for future reference, that you can only save changes on this screen one at a time.

Student Impersonation

Impersonation allows you to see the Student Portal from the Student’s view.

Only Users assigned with the Role: Primary User can impersonate Students.

Figure 2. Navigate to the Student Tab

Figure 3.

Impersonation mode is indicated by the purple banner at the top.

• SELMA Configuration Steps
  • Moodle Field Mapping
  • Sync Grades
• Create Student Moodle Account
• Intake Components
• Enrolment Components
  • Sync Individual Enrolment Components to Moodle
  • Bulk Sync Enrolments to Moodle
• Sync Staff to Moodle (Class Tab)

SELMA Configuration Steps

Figure 1. Navigate to Settings > Integrations

Figure 2. Navigate to Integrations > Moodle

Figure 3i. Configuration Settings

Figure 3ii. Provide Details and Save

The Endpoint will be your unique Moodle URL (e.g. https://moodle.yourdomain.com), and the Token will be the Web Service Token you created and saved, previously. The default Teacher Role and Student Role is usually 3 and 5, respectively, but please verify the “ID” in Moodle.
NOTE: Change “Groups Enabled” to “Yes” if you want to sync SELMA Classes to Groups in Moodle.

Figure 4i. Verify your Configuration

Click the “Test Connection” button to verify your configuration.

Figure 4ii. Check Logs

Check the Integration Logs for any error details if the test fails, as below.
Note: Please monitor the logs regularly for any sync issues, and reach out to SELMA Support for further assistance.

Moodle Field Mapping

Map fields found on the SELMA Student profile or Staff User profile in Moodle.

• Please reach out to SELMA support to add other SELMA fields, which do not exist already by default.

Figure 5i. Navigate to Moodle Field Mapping

Figure 5ii. Moodle Profile Field Names

Enter the “shortname” of the custom profile field in Moodle, which the SELMA field would map onto; (please keep in mind that only text-based data can be used). The tabs at the top of the screen allow you to update SELMA Student fields or Staff fields (orange).

Sync Grades

Manually fetch grades from Moodle and sync them with Enrolment Components in SELMA.

• It is recommended to manually sync grades as you transition into using the Moodle Integration. After gaining some familiarity and verifying that grades are syncing as intended, please contact SELMA Support to enable automatic syncing of grades from Moodle.

Figure 6. Navigate to Sync Grades

Create Student Moodle Account

Once Moodle Integration has been enabled and tested to be working, you can create a Moodle Account for a Student from SELMA, if it doesn’t exist already.

Figure 7. Click the Action Button

Click “Create Moodle Account” to create a Moodle account for a Student, using the SELMA Student record. If the Student already exists in Moodle, SELMA will pick this up from their email, and update the Moodle account accordingly.

Intake Components

Before creating Enrolments you must ensure, that their corresponding Intake Components have the correct settings enabled.

• Note: All Intake Component details are propagated to Enrolment Components.

Figure 8. Navigate from Intake > Component

Click the green “pencil icon” to view and edit an Intake Component.

Figure 9i. Edit Moodle Fields on the Component Tab

Figure 9ii. Select Moodle Courses and Track Moodle Course Completions

Make sure to select “Track Course Completion” to ensure SELMA grades are informed by the Student’s course completions in Moodle.

Gradebook Item: The dropdown allows you to select from a range of Gradebook item categories set-up in Moodle.
NOTE: Complex grading logic can only be set-up in Moodle, and the final result is imported into SELMA.

Enrolment Components

As previously mentioned, Intake Components are propagated to Enrolments.

You can then sync individual Enrolment Components with Moodle, or perform a bulk update from the Intake level.

PLEASE TAKE NOTE OF THE FOLLOWING:

• When creating an Enrolment, Students are automatically enrolled into a selected Intake/s. However, Enrolments must be linked to Classes manually, afterwards, if applicable; (please see Cohorts – Creating and Managing Classes to guide you)
  • IMPORTANT:
    • Enrolments which belong to a Group in Moodle must be linked to the equivalent Class in SELMA before you sync Enrolment Components.
    • The SELMA Class Code informs the Moodle group name.
• All Enrolments must have the Enrolment Status: “Active” to be synced to Moodle.

Sync Individual Enrolment Components to Moodle

Figure 10. Navigate from Enrolment > Enrolment Tab

On the Enrolment tab, click the Moodle icon to sync a select Enrolment Component to Moodle.

Bulk Sync Enrolments to Moodle

Figure 11i. Bulk Sync Enrolments from Intake

Sync Staff to Moodle (Class Tab)

You can sync Staff linked to a Class in SELMA, from the Class tab.

A use case for this capability could be teachers who need to grade assessments for a Class.

• NOTE: Moodle “Groups” are the equivalent of SELMA “Classes”.

How to Enrol Students

Figure 1. Invite to Portal

Click the portal invitation link in your primary email inbox. Then, follow the instructions, and set-up a password via the “Forgot Password” option.

• NOTE: The portal invitation email may be found in your spam/junk folder.

Figure 2. Enrol Students

Click the link “Enrol Students” on the top navigation bar.

Figure 3. Select a Programme

You will see all available Programme/s, here. Click the “View Intakes” button to select a Programme.

Figure 4. Select Intake and Enrol

Fill out the required fields, as marked by red asterisks.

• NOTE: You can see specific details about each Intake (orange), including how many spots are remaining in the Intake. You can also select multiple Enrolments, using that number to guide you.

Figure 5. Review Details and Pay

Review all details before choosing to pay immediately (green button), or generating an invoice to send as an email to your Primary Email address.

• NOTE: Once this is done, the Contact’s Fees tab will show the sum of fees associated with Enrolments.

In this Section:

• Assign Students to Stakeholders
• Enable Enrolment Creation for Stakeholders
  • Portal Configuration (must read before proceeding)
  • Create a Contact-Organisation Association
  • Enable the Contact Portal on the Programme
  • Create an Intake-Organisation Association
  • Enable Portal Enrolment for Contacts

Assign Students to Stakeholders

Enable Stakeholder access to specific Student and Enrolment records, by creating Student-Contact Associations.

Figure 1i. Add a Related Contact

Navigate to a Student profile and add a Related Contact on the Stakeholders tab.

Figure 1ii. Provide Required Details and Save

Fill-in the required details, as indicated by red asterisks. You can also set the contact as the primary contact, emergency contact, and/or include them in communications.

Figure 2. Contact Portal View

The Stakeholder will now be able to see a list of Students they are associated with. If they click on a name on the Students tab, they will be taken to the corresponding Student profile, and will be able to see their respective Enrolment details, too.

Enable Enrolment Creation for Stakeholders

Before the Stakeholder can enrol Students, successfully, you must follow a series of steps to configure their Contact Portal.

Please read the following sub-sections, sequentially, to configure the portal for stakeholders who wish to create Enrolments.

Portal Configuration

There are some pre-requisite settings to change before you proceed.

• Note: The following steps can only be done by the Primary User.

Figure 3i. Navigate to Settings > Portal Admin

Figure 3ii. Ensure Contact Portal is Active

Figure 3iii. Enrol Students Flag

Scroll to the bottom of the Portal Admin page, and enable “Contacts Enrol Students”.

Create a Contact-Organisation Association

Link the Organisation to the appropriate Contact from the Organisations tab.

Figure 4. Link the Organisation to the Contact

Navigate to the Organisations tab on the Contact profile, and click the green “+Link” button create a relationship between the Organisation and Contact.

Enable the Contact Portal on the Programme

Enabling the Contact Portal on the Programme will show ALL of the Intakes associated with that Programme on the Contact Portal.

• Note: You must set this up whether or not you require all intakes to show.

Figure 5. Navigate to Curriculum Index > Programme

On the Programme tab, edit the “Show in Contact Portal” field to “Yes”.

Create an Intake-Organisation Association

Link the Organisation to the appropriate Intakes from the Intake tab.

From here, you should also hide an Intake from the Contact Portal, if necessary.

Figure 6. Link the Organisation to the Intake

Navigate to the Intake tab on the Intake profile, and select the relevant Organisation (red). You can also hide the Intakes you do not want the Contact to see in the Contact Portal (green).

Enable Portal Enrolment for Contacts

Allow Contacts to Enrol Students into Intakes from the Contact Portal.

Figure 7. Portal Enrolment Enabled | Contact tab

Navigate to the Contact tab of the Contact profile and change the field to “Yes” (green).