This article covers the SPF and DKIM authentication processes for Marketo and how are they managed in Valimail. While only one of the two authentication methods is required for an email to pass DMARC, our recommendation is to configure both whenever possible.

1. Open your Marketo account as an administrator.

2. Go to the Admin section.

3. Click Email, then the DKIM tab, and finally Add Domain.

4. Enter the domain you will be using in Marketo emails as the From Address and click Add.

5. Copy the Host Record and TXT Value and add the DKIM key in Valimail Enforce.

6. Once the DKIM key is added in Valimail Enforce, come back to Marketo, select your domain, and click Check DNS.

7. Once the DKIM key is validated, you will be ready to send authentication emails on behalf of your domain, using Marketo.

Note: The Marketo DNS check may not like the Valimail SPF Macro and display a warning. While Marketo will send in alignment, you may need to contact Marketo Support to have them override the SPF validation script in their UI. The SPF response will work correctly and you can verify this by following the instructions found in this article: Valimail SPF Records.

You can find the instructions on how to turn on DKIM in Marketo here.
​
​

You can find more detailed information on how to add a DKIM key in Valimail, here:

Once you establish that Marketo is an authorized sender for your domain, you will need to add the service in your Enabled Senders.

You will find more detailed information on how to add a service for your domain in Valimail, here:

Note: We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.