Microsoft 365 (Account-Level Emails)

Enabling the Microsoft 365 integration in SELMA allows you to use your organisation's Microsoft mailbox(es) to send emails directly from SELMA. Emails sent within SELMA are also stored in the mailbox's Sent folder.

Note: Individuals with administrator access to your Microsoft tenancy should follow the steps below.

In this Section:

Setting up the integration involves four stages:

Stage 1 — Register an Application in Microsoft Entra
Stage 2 — Add a Client Secret
Stage 3 — Configure API Permissions
Stage 4 — Connect the Integration in SELMA
Set-Up Complete
Two-Way Communications

Stage 1 — Register an Application in Microsoft Entra

Go to the Microsoft Entra portal homepage: https://entra.microsoft.com/#home Then, add a new registration.

Screenshot: Figure 1i. Navigate to Homepage > App Registrations — Figure 1i. Navigate to Homepage > App Registrations

Name the application something identifiable, such as "SELMA M365 Integration". All remaining fields can be left at their default values. Click Register.

Screenshot: Figure 1ii. Add a Name and Link an Account Type — Figure 1ii. Add a Name and Link an Account Type

Once you have added a new registration, you will be taken back to the App Overview page, where you should note the Application (client) ID and Directory (tenant) ID. You will need these in Stage 4. Note: you will need to fetch a client secret key (red), which will be explained further in the next step.

Screenshot: Figure 1iii — Save IDs and Fetch Client Secret Key — Figure 1iii — Save IDs and Fetch Client Secret Key

Stage 2 — Add a Client Secret

Click the button "+ New client secret". Note: You will have reached this page from the last step.

Screenshot: Figure 2i. Navigate to the Certificates and Secrets Page — Figure 2i. Navigate to the Certificates and Secrets Page

Enter a name and set an expiry duration, then click Add. ⚠️ Important: Set a reminder to create a new secret before it expires. Update the secret in SELMA before the expiry date to avoid any disruption.

Screenshot: Figure 2ii. Define the Client Secret — Figure 2ii. Define the Client Secret

Copy the secret value immediately — it will not be displayed again after you navigate away or refresh the page. You will need this value in Stage 4. Note: If you can no longer copy the secret value, delete it and repeat Stage 2 from the beginning.

Screenshot: Figure 2iii. Save the Client Secret Key — Figure 2iii. Save the Client Secret Key

Stage 3 — Configure API Permissions

Within the same app, click API Permissions → Add a permission → Microsoft Graph.

Screenshot: Figure 3i. Navigate to Microsoft Graph — Figure 3i. Navigate to Microsoft Graph

Select Application permissions (this allows the integration to send emails on the users behalf). Then, search for and add User.ReadBasic.All permission. This validates access to your designated mailbox.

Screenshot: Figure 3ii. Select the User.ReadBasic API Permission — Figure 3ii. Select the User.ReadBasic API Permission

Select the Mail.Send API Permission, and Add All

Search for and add the Mail.ReadWrite permission. This enables replies to emails leaving SELMA to appear in SELMA. Finally, add all permissions (green).

Screenshot: Figure 3iv — Select the Mail.ReadWrite API Permission, and Add All — Figure 3iv — Select the Mail.ReadWrite API Permission, and Add All

Once all permissions are added, click Grant admin consent to approve them for your organisation. Note: You will only be able to click this button if you are an admin or have the correct permissions, which is managed by your IT team.

Screenshot: Figure 3v. Grant Admin Consent — Figure 3v. Grant Admin Consent

Stage 4 — Connect the Integration in SELMA

On your SELMA instance, go navigate to Settings (cog icon, top-right) > Integrations.

Screenshot: Figure 4i. Navigate to Integrations > Settings — Figure 4i. Navigate to Integrations > Settings

Click the "Configure" button, below Microsoft 365.

Screenshot: Figure 4ii. Select Microsoft 365 Integration — Figure 4ii. Select Microsoft 365 Integration

Expand the Account-Level Configuration section and enter the three values saved from Stages 1 and 2: Tenant ID and Client ID - Figure 1iii, and Client Secret Key - Figure 2iii.

Screenshot: Figure 4iii. Update Account-Level Configuration — Figure 4iii. Update Account-Level Configuration

Test the connection to confirm the credentials are valid.

Then, click the Mailbox Set-up to enter and validate the email address(es) you wish to send communications from in SELMA.

Wish to limit the integration App's mailbox access in your Microsoft tenancy? Follow these steps

Finally, send a test email to confirm everything is working end-to-end. Note: If any of the tests and validations fail, please enquire with SELMA Support.

Screenshot: Figure 4iv. Check Connection and Validate Mailbox — Figure 4iv. Check Connection and Validate Mailbox

Set-Up Complete

The integration is now fully configured. This means you can send emails within SELMA from your validated mailbox address.

Two-Way Communications

This feature allows you to see an email thread of correspondence within SELMA, which can be accessed from the Student Profile > Events tab.

Please contact SELMA Support to enable this feature as part of your Microsoft Integration Plan.