enrola updates: sign-in codes and Talent Pool

These changes reached enrola between 20 and 27 October 2026.

Sign-in codes

From 27 October 2026, signing in to enrola needs a six-digit code sent by email as well as your password. Each code works once, for 10 minutes. See security.
A device where you tick “Keep me signed in on this device” stays signed in without a new code. The enrola API is unchanged.
After repeated wrong passwords, sign-in stays locked even with a correct code.

Admins can close an Opportunity straight away from a Close dialog, and reopen it later. A closed vacancy takes no more applications, and its page says it has closed. See Opportunities.
Admins and Team Owners can close up to 50 Opportunities at once from the list.
Each Opportunity type can email its applicants when the vacancy is filled or closed, and the Close dialog has a tick box to send it.
Moving an applicant to another Opportunity can send them an email about the move, set up for each Opportunity type, with a tick box in every move.
The vacancy form you send an employer is laid out like your advert, and you review the employer’s answers one at a time.
Posting Control shows the Find an apprenticeship vacancy reference, and a link to the vacancy 24 hours after posting. See Find an apprenticeship.

The Talent Pool holds applicants who have agreed to be considered for other roles. You move them onto a live Opportunity when one suits them. See applicant tracking.
Admins and Team Owners can delete many Applications at once, after a confirmation step.
You review an applicant’s request-more-info answers one at a time, each with its own Accept button.
An applicant’s history lists only your organisation’s applications, archived ones included.
Applicant profiles show the options chosen in list questions and the learning difficulty and disability answers, and group short answers together.

A Deals board follows employer deals through stages you name, with their values and expected starts. An Admin switches it on with “Start using Deals”. See employer CRM.
Only Admins and Team Owners can delete Employers and Contacts.
They can delete many Employers at once; Employers with Opportunities are left in place.

Email templates offer every merge field through a Personalise picker, and enrola checks them when you save. Renaming a custom field keeps its merge field working. See emails, forms and surveys.
A Preview button shows an email as it will be sent, with sample data or a real record.
Emails are sent in the background and retried if the mail service fails. View email shows each email’s delivery status, such as sent, rejected or failed.

Admins can rename built-in form fields, and the new name shows on records, forms, applicant profiles and their PDFs. See settings and branding.
Settings → Form fields marks your own fields, suggests matching fields as you type, and has a Find a field page.
Admins can import Opportunities, Employers, Contacts, Applications and Learners from CSV files, naming related records in words. See moving to enrola.

Staff transfer a Learner to Bud through Posting Control, and Bud invites them to register. See Bud.
API clients can download file fields and CVs with their access token. See the API.
Form links sent by email use random tokens and stop working after 30 days.
enrola cleans rich text when it is saved, so it cannot carry scripts.