Mpesa integration
STEP 1 – Access MPESA Portal and Create Two Operators
a) Request Admin Access to MPESA Portal – https://org.ke.m-pesa.com
- Fill in the below MPESA Business Admin Activation Request Template with your company details, let all directors sign it, (in case of Sole Proprietorship, the single director will sign it), stamp it
–MPESA Business Admin Account Activation Request Template –
Word Format
–Mpesa Business Admin Account Activation Template – PDF - Make sure you attach copies of national ID or passport for all the directors who sign the letter
- Send the above documents to M-PESABusiness@safaricom.co.ke
b) Getting and Installing MPESA Certificate
Once you get the above admin login details to MPESA portal, you need to login to the MPESA portal and create two operators (API and Web). Before we can access the MPESA Portal https://org.ke.m-pesa.com/, we need to install an MPESA Certificate. Please note that the certificate only works for Windows OS systems
- Send a blank email to M-PESACertpassword@safaricom.co.ke
- You will receive an email from Safaricom with Subject M-PESA Certificate Password [Automatic Response], which has the username and password you need to apply for the MPESA Certificate
- Open this url https://vmtke.ca.vodafone.com/certsrv on Internet Explorer browser on your Windows OS computer – and enter the username and password provided on the email
- Click on the Settings icon, then select Compatibility View Settings
Next click on Settings Icon, Go to Internet Options, choose Advanced and scroll down to ensure your settings are shown as below
Next Click on Settings Icon, select Internet Options, then Select the Advanced tab, scroll down and ensure your settings are as shown below
- Click on *Apply* and then OK.
- Close and then open internet explorer to proceed smoothly without a hitch. Open the URL again https://vmtke.ca.vodafone.com/certsrv and this time you will be prompted with the below dialog box, select on Yes
- Fill in the details exactly as they appear on your ID card, and on the Paybill or Till number forms that you sent to Safaricom. Your certificate application shall be denied if you fill incorrect or invalid details e.g. a single name, invalid email or incorrect organization name.
- After submitting, you’ll get a response saying your certificate is pending. You are supposed to return to the site – https://vmtke.ca.vodafone.com/certsrv – after about 2 – 24 hours and check whether your certificate has been approved
- Click on Client Authentication Certificate to proceed
If the Certificate is issue, you will see a screen like below, click on Install this Certificate to proceed
- A Web Access confirmation warning will appear asking you to confirm the operation. Click on „yes’
- Click on “install this CA certificate’
- It will prompt you to open or save the file. Click on open.
- Once open, select ‘install certificate’
- A window will open as below. Click next.
- Click on ‘place all certificates in the following store‟ then select ‘Trusted Root Certification Authorities
- Click on ‘next’
- Then finish the process
- You will then get a prompt asking you if you are sure you want to install the certificate. Click in „yes‟
The certificate is now imported. Next Final Step is to install it…
Go back to the certificate request website and click on install the certificate as below
You will be directed to the page below.
You will be able to login to the M-PESA Portal site via the below URL; https://org.ke.m-pesa.com
STEP 2. CREATING WEB AND API OPERATORS
- Visit the MPESA Portal url https://org.ke.m-pesa.com/ and login with the username and password you received from Safaricom after sending them the letter on Step 1 above. Note that Shortocode refers to either Paybill Number or Store number (use Store number if you have a Till Number
- Enter the One Time Passcode (OTP) that is sent to your phone number
- Once logged in, click on Browse Organization
- Next, click on Operators, then click on the Add icon
Create an API Operator
- Start by creating an API operator. Select API under Access Channel
- Enter an appropriate API username and click on Next
- Under Rule Profile, select Web Operator Rule Profile
- Then click on the *Add* icon, and select the following options under the Select Role dialog, then click on OK
- After that, you’ll see screen of the roles you just select, you can add more roles here or just hit the Next button
- The next option is the *Know Your Customer – KYC* fields, enter the details and click on next. Make sure under Preferred Notification Channel, you select SMS and your phone number follows the format 2547xxyyyyyy e.g 254746490042. After that click on next and finish
Create a Web Operator
- Click on Operators then on the Add icon
- Then select Web under Access Channel
- Enter an appropriate username and note it down as you will need it to login back to the MPESA portal later
- Under Rule Profile, Select Web Operator Rule Profile
- Then click on Add button and select the options shown below under Role
- Then hit next after that
- Fill in the KYC details as shown below
- Finally submit to create your Web Operator. Immediately you submit, you will receive a SMS on the number you entered under KYC information. The SMS contains the username and password for your Web Operator. Logout and log back in using the details on sent the SMS to activate the Web Operator. In order for the plugin to work, the web operator must be active
#3. Finally (After creating an app on Mpesa daraja and integrating it with the site).
Send a letter as in the template below 👇 requsting for Mpesa pass Key (offered by Mpesa)
