How to set up DMARC for Zuora in Valimail

Updated over a week ago

This article covers the SPF and DKIM authentication processes for Zuora and how they are managed in Valimail. While only one of the two authentication methods is required for an email to pass DMARC, our recommendation is to configure both whenever possible.

Configuring DKIM authentication for your Zuora emails

Zuora utilizes Amazon SES to send emails in Workflow with [email protected] as the default From email address. Zuora has validated this email address in Amazon SES, so you do not need to perform any configuration in your Zuora tenant.

If you decide to use your own email from your domain as the From email address, you should take the following steps to ensure emails in Workflow are delivered successfully:

  • Add include:amazonses.com to the SPF record to your domain’s DNS settings.
    This setting in your SPF record informs receiving mail servers that Amazon SES is authorized to send emails on your behalf, and can enhance the deliverability of your emails from being blocked or sent to spam or junk filters.

To setup DKIM for your Zuora emails, please Submit a request for DNS CNAME records at Zuora Global Support. Then you will receive three CNAME records.

  • Add the three CNAME records to your domain’s DNS settings for DKIM verification.

Note: If you manage DKIM for your domain in Valimail, you will need to add the 3 CNAME keys on your domain's configuration page in the Valimail platform.

You can also find the instructions on how to set up DKIM and SPF for Zuora, here.

Add a Zuora DKIM key in Valimail

You can find more detailed information on how to add a DKIM key in Valimail, here:

Configuring SPF authentication for your Zuora emails

Once you establish that Zuora is an authorized sender for your domain, you will need to add the service in your Enabled Senders.

You will find more detailed information on how to add a service for your domain in Valimail, here:

Note: We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.

Did this answer your question?