This article covers the SPF and DKIM authentication processes for Zendesk and how are they managed in Valimail. While only one of the two authentication methods is required for an email to pass DMARC, our recommendation is to configure both whenever possible.

1. Log in to your Zendesk account.

2. Navigate to Admin > Channels >Email

3. Navigate to Custom domain for DKIM. Here you will find 2 CNAME records to be added to Valimail Enforce for selectors zendesk1 and zendesk2

4. The two CNAME records would appear as zendesk1._domainkey.yourdomain.com pointing to zendesk1._domainkey.zendesk.com and zendesk2._domainkey.yourdomain.com pointing to zendesk2._domainkey.zendesk.com (The record values are the ones bolded).

6. After the records are published in Valimail Enforce, head back to Zendesk and simple click on Enable checkbox in the Custom domain for DKIM section.

7. Click on Save to create your custom domain for DKIM on Zendesk.

You can find the instructions on how to setup DKIM signing in Zendesk here.

You can find more detailed information on how to add a DKIM key in Valimail, here:

Once you establish that Zendesk is an authorized sender for your domain, you will need to add the service in your Enabled Senders.

You will find more detailed information on how to add a service for your domain in Valimail, here:

Note: We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.

You may notice that Zendesk emails are not authenticated via SPF, even after you have added Zendesk to your domain's configuration. This is likely caused by Zendesk not sending SPF aligned-mail and can be corrected by following the process detailed here.

​