Microsoft 365 (User-Level Emails)

Enabling the Microsoft 365 integration in SELMA allows you to use your organisation's Microsoft mailbox(es) to send emails directly from SELMA. Emails…

Enabling the user-level Microsoft 365 integration in SELMA allows your SELMA users to use their own Microsoft mailbox(es) to send emails directly from SELMA. Emails sent within SELMA are also stored in the mailbox's Sent folder.

Note: Individuals with administrator access to your Microsoft tenancy should follow the steps below.

Stage 1 — Register an Application in Microsoft Entra Stage 2 — Add a Client Secret Stage 3 — Redirect URL Stage 4 — Configure API Permissions Stage 5 — Connect the Integration in SELMA Stage 6 — Each SELMA User must link their Microsoft account in SELMA Set-Up Complete Two-Way Communications

Stage 1 — Register an Application in Microsoft Entra

Go to the Microsoft Entra portal homepage: https://entra.microsoft.com/#home Then, add a new registration.

Screenshot: Figure 1i. Navigate to Homepage > App Registrations — Figure 1i. Navigate to Homepage > App Registrations

Name the application something identifiable, such as "SELMA M365 Integration". All remaining fields can be left at their default values. Click Register.

Screenshot: Figure 1ii. Add a Name and Link an Account Type — Figure 1ii. Add a Name and Link an Account Type

Once you have added a new registration, you will be taken back to the App Overview page, where you should note the Application (client) ID and Directory (tenant) ID. You will need these in Stage 4. Note: you will need to fetch a client secret key (red), which will be explained further in the next step.

Screenshot: Figure 1iii — Save IDs and Fetch Client Secret Key — Figure 1iii — Save IDs and Fetch Client Secret Key

Stage 2 — Add a Client Secret

Click the button "+ New client secret". Note: You will have reached this page from the last step.

Screenshot: Figure 2i. Navigate to the Certificates and Secrets Page — Figure 2i. Navigate to the Certificates and Secrets Page

Enter a name and set an expiry duration, then click Add. ⚠️ Important: Set a reminder to create a new secret before it expires. Update the secret in SELMA before the expiry date to avoid any disruption.

Screenshot: Figure 2ii. Define the Client Secret — Figure 2ii. Define the Client Secret

Copy the secret value immediately — it will not be displayed again after you navigate away or refresh the page. You will need this value in Stage 4. Note: If you can no longer copy the secret value, delete it and repeat Stage 2 from the beginning.

Screenshot: Figure 2iii. Save the Client Secret Key — Figure 2iii. Save the Client Secret Key

Stage 3 — Redirect URL

Return to the “Overview” page and click "Add Redirect URL".

Screenshot: Figure 3i. Navigate to the Overview Page and Add Redirect URL — Figure 3i. Navigate to the Overview Page and Add Redirect URL

Click “Add Redirect URL” and select the “Web” option.

Screenshot: Figure 3ii. Select a Platform — Figure 3ii. Select a Platform

You’ll be asked to enter the Redirect URL now. Back in SELMA, you can copy the Redirect URL from the Integration Configuration page (please see the next step).

Screenshot: Figure 3iii. Provide the Redirect URL and Click "Configure" — Figure 3iii. Provide the Redirect URL and Click "Configure"

Navigate to Settings > Integrations > Microsoft 365, and expand the User-Level Configuration section. Then, copy the Redirect URL to paste back in your Microsoft account.

Screenshot: Figure 3iv. Copy the Redirect URL from SELMA — Figure 3iv. Copy the Redirect URL from SELMA

Stage 4 — Configure API Permissions

Navigate to Microsoft Graph

Within the same app, click API Permissions → Add a permission → Microsoft Graph.

Select Application permissions (this allows the integration to send emails on the users behalf). Then, search for and add User.ReadBasic.All permission. This validates access to your designated mailbox.

Screenshot: Figure 4ii. Select the User.ReadBasic API Permission — Figure 4ii. Select the User.ReadBasic API Permission

Select the Mail.Send API Permission, and Add All

Search for and add the Mail.ReadWrite permission. This enables replies to emails leaving SELMA to appear in SELMA. Finally, add all permissions (green).

Screenshot: Figure 4iv — Select the Mail.ReadWrite API Permission, and Add All — Figure 4iv — Select the Mail.ReadWrite API Permission, and Add All

Once all permissions are added, click Grant admin consent to approve them for your organisation. Note: You will only be able to click this button if you are an admin or have the correct permissions, which is managed by your IT team.

Screenshot: Figure 4v. Grant Admin Consent — Figure 4v. Grant Admin Consent

Stage 5 — Connect the Integration in SELMA

On your SELMA instance, go navigate to Settings (cog icon, top-right) > Integrations.

Screenshot: Figure 5i. Navigate to Integrations > Settings — Figure 5i. Navigate to Integrations > Settings

Click the "Configure" button, below Microsoft 365.

Screenshot: Figure 5ii. Select Microsoft 365 Integration — Figure 5ii. Select Microsoft 365 Integration

Click to expand the User-Level Configuration section, and enter the three values saved from Stages 1 and 2: Tenant ID and Client ID - Figure 1iii, and Client Secret Key - Figure 2iii.

Screenshot: Figure 5iii. Update User-Level Configuration — Figure 5iii. Update User-Level Configuration

Stage 6 — Each SELMA User must link their Microsoft account in SELMA

To link you Microsoft 365 Mailbox with SELMA, please click on your picture on the top right corner and open the option "Profile".

Navigate to your Profile (top-right profile picture)

On the left side panel, click on "Link Microsoft 365" and follow the steps provided. You may need to enter your Microsoft password and/or request admin approval.

This will guide you through your usual Microsoft login process, and ask you to authorise the requested permission. Once authorised, you’ll be redirected back to SELMA, where you will see a success message.

Link Microsoft Integration to your Profile

Set-Up Complete

The integration is now fully configured. This means you can send emails within SELMA from your validated mailbox address.

Two-Way Communications

This feature allows you to see an email thread of correspondence within SELMA, which can be accessed from the Student Profile > Events tab.

Please contact SELMA Support to enable this feature as part of your Microsoft Integration Plan.

Microsoft 365 (User-Level Emails)

On this page