DKIM and SPF Email Credibility

If Schoolworks/Salesforce is being used to send emails, on behalf of a customer domain (e.g. abc@<myschool>.<com/net/edu/org etc.> then in order to improve credibility of emails being sent by Salesforce, SPF and DKIM can be enabled.

SPF (Sender Policy Framework)

This works by placing a new DNS record on the customers domain (typically by their IT department)

Further information: https://help.salesforce.com/s/articleView?language=en_US&id=sf.emailadmin_spf_include_salesforce.htm&type=5

Example SPF records:

• v=spf1 mx include:_spf.salesforce.com ~all

• v=spf1 mx ip4:204.14.234.64/28 ip4:204.14.232.64/28 ip4:182.50.78.64/28 ip4:96.43.144.64/31 ip4:96.43.148.64/31 include:_spf.salesforce.com ~all

DKIM (Domain Keys Identified Mail)

Background: [Updated 2024] What Is DKIM? DomainKeys Identified Mail Explained

https://help.salesforce.com/s/articleView?id=000381186&type=1

Steps:

1. Search for DKIM in Setup of Salesforce

   1. This is via Setup → Email – DKIM Keys

2. Create the DKIM Keys

   1. Set the Selector, Alternate Selector, Domain and Domain match pattern

   2. Salesforce will then create two CNAME DNS records to enter into the customer DNS

3. Customer creates the to CNAME records on their domain (typically done by their IT department)

   1. e.g. the DKIM CNAME keys will be something like

      1. school1._domainkey.myschool.com IN CNAME abcdefgh.6kfhyh.custdkim.salesforce.com.

      2. school1._domainkey.myschool.com IN CNAME abcdefgh.6kfhyh.custdkim.salesforce.com.

4. Activate in Salesforce

   1. Once published, go back to Salesforce and the ‘Activate’ button will be enabled

   2. Click ‘Activate’

You tube video: