This article covers the SPF and DKIM authentication processes for Intercom and how they are managed in Valimail Enforce. While only one of the two authentication methods is required for an email to pass DMARC, our recommendation is to configure both whenever possible.


Configuring DKIM authentication for your Intercom emails

1. Visit the Domains page in email settings. This page contains the information you'll need to configure the DNS records for each of the domains you use as part of your sender addresses. It'll look like this:

a screen shot of a web page

2. Click Next to move to step 2 - Copy your records. Here you can copy the names and values of the domain-key and bounce CNAME entries to update your external DNS configuration.

a screenshot of a computer

Important: The second CNAME record is used to customize the return-path address on emails you send from Intercom. This is an optional step, and not performing this step will not prevent you sending messages, however, it is highly recommended to ensure delivery of your messages. 

Your domain will show as unauthenticated until both CNAME records have been added.

If two or more of your sender addresses use the same domain, you will only need to configure one DNS entry to enable DKIM signing for emails sent using any of these addresses.

3. Add the first CNAME record which is the DKIM key, in Valimail Enforce. Add the second CNAME record only in your DNS.

4. After you added the DKIM key in Enforce and the second CNAME record in your DNS, the final step is to click on Check status. If configured correctly your status will change for each CNAME will change to Authenticated and your domain will be fully validated.

a black line with numbers and a curved line

You can also find the instruction on how to set up DKIM and SPF for Intercom here.

Add an Intercom DKIM key in Enforce

1. Go to your domain's Configuration page in Valimail Enforce and publish the newly created DKIM key.

    a. Scroll down and add the two DKIM keys in your configuration, by clicking on Add a DKIM key

    b. Enter the selector name, CNAME target value, associate the key with Intercom and then click Add.

a screenshot of a computer

You can find more detailed information on how to add a DKIM key in Valimail Enforce here.

Configuring SPF authentication for your Intercom emails

Once you establish that Intercom is an authorized sender for your domain, you will need to add the service in your Enabled Senders list in Enforce.

1. Please go to your domain's Configuration page in Enforce.

2. Click on the + sign from the Enabled Senders section:

a screenshot of a email

3. Choose Intercom from the list of configurable senders and then click Enable:

a screenshot of a computer

We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.

As always, if you have any questions, please don't hesitate to submit a ticket.