Salesforce Marketing Cloud requires special configuration actions outside of Authenticate. Please follow these steps to complete the configuration for Salesforce Marketing Cloud, and then return to your automation-guided task list in Authenticate.

  1. It is not necessary to add Salesforce Marketing Cloud as an 'Approved Sender' because the service uses a dedicated subdomain that will be delegated to Salesforce Marketing Cloud servers. Salesforce Marketing Cloud will then publish an SPF record on that subdomain.
  2. In order to send authenticated emails, you will need to purchase a Sender Authentication Package (SAP) from Salesforce: Sender Authentication Package (SAP) You may already have this package purchase as part of your Salesforce Marketing Cloud contract.
  3. To set up the Sender Authentication Package you will need to work with Salesforce Marketing Cloud support.  They will provide you with setup instructions.
  4. The preferred option is to delegate the subdomain to Salesforce Marketing Cloud which allows Salesforce Marketing Cloud to host all DNS records on their DNS servers. This means that Salesforce Marketing Cloud will host SPF and DKIM.  This delegation work is done with your DNS service provider. 

  5. Once you have delegated the subdomain in your DNS you will also need to add the DKIM key(s) to Authenticate.

  6.  Click on 'Salesforce Marketing Cloud' in the 'Senders' section.

  7.  Then click on 'ADD DKIM Key'

  8. Then add the DKIM key 'Selector', keep the 'Record Type' as 'TXT', and add the 'Public Key' value that you were given.