Salesforce does not require special configuration actions for SPF outside of Authenticate, but it does require some actions by your Salesforce Administrator to enable and activate DKIM keys. Please follow the steps below to complete the configuration configuration in Salesforce, and then return to your automation-guided task list in Authenticate.



1. Make sure you have added Salesforce as an Approved Sender in Authenticate for the domain you are configuring it for.


Note: If Salesforce has not been approved, please do so now by following these steps:


a. From the Senders section, click on + ADD SENDER FOR [your domain]

b. Choose Salesforce from the Service Name drop-down, and click ADD.






2. The DKIM keys for Salesforce will have to be generated from the Salesforce Administrator Account in the Salesforce platform.


Enable DKIM signing for your domain in Salesforce



1. Navigate to the Salesforce Setup menu and type in DKIM in the quick find. 


2. Click on DKIM Keys.



3. Select Create New Key.




4. Now choose your key size, and for the primary DKIM selector enter sfdc1. For your alternative selector enter sfdc2. 

Note: You can use the default values of s1 and s2, but they may already be in use by other another service. If s1 and s2 selectors are already in use by other keys, please choose other custom names for the selectors. (sf1 and sf2, salesforce1 and salesforce2, etc).


5. Enter your domain name, in this case, we have used yourdomain.com. 


6. You can choose your domain match according to your preferences. In this case, we have chosen to go with the exact match.


7. Click Save.


8. It may take some time for Salesforce to generate the 2 CNAME records. Refresh your page, and you will see something like this: 



9. Publish the 2 CNAME keys in Authenticate.




10. After publishing the DKIM keys in Authenticate, please return to the Salesforce console and click on the Activate button to activate the DKIM keys. 


Note: It may take Salesforce some time to recognize that the keys are present.




11. Once you have completed these steps, you can begin sending authenticated email using Salesforce.