SPF(supported) DKIM(recommended)
This article covers the SPF and DKIM authentication processes for Zendesk and how are they managed in Valimail Enforce. While only one of the two authentication methods is required for an email to pass DMARC, our recommendation is to configure both whenever possible.
TABLE OF CONTENTS
- Configuring DKIM authentication for your Zendesk emails
- Add a Zendesk DKIM key in Enforce
- Configuring SPF authentication for your Zendesk emails
- Enable SPF alignment in Zendesk for your domain
Configuring DKIM authentication for your Zendesk emails
1. Log in to your Zendesk account.
2. Navigate to Admin > Channels >Email
3. Navigate to Custom domain for DKIM. Here you will find 2 CNAME records to be added to Valimail Enforce for selectors zendesk1 and zendesk2
4. The two CNAME records would appear as zendesk1._domainkey.yourdomain.com pointing to zendesk1._domainkey.zendesk.com and zendesk2._domainkey.yourdomain.com pointing to zendesk2._domainkey.zendesk.com (The record values are the ones bolded).
6. After the records are published in Valimail Enforce, head back to Zendesk and simple click on Enable checkbox in the Custom domain for DKIM section.
7. Click on Save to create your custom domain for DKIM on Zendesk.
You can find the instructions on how to setup DKIM signing in Zendesk here.
Add a Zendesk DKIM key in Enforce
1. Go to your domain's Configuration page in Valimail Enforce and publish the newly created Zendesk DKIM keys.
a. Scroll down and add the two DKIM keys in your configuration, by clicking on Add a DKIM key.
b. Enter the selector name, CNAME target value, associate the keys with Zendesk and then click Add.
Note: When you add Zendesk to your Enabled Senders list in Valimail Enforce, the 2 default Zendesk DKIM keys will be usually added in the DKIM management section in Enforce. If that will be the case, please delete them and proceed to add the 2 DKIM keys issued in the Zendesk console for your domain as described above.
Configuring SPF authentication for your Zendesk emails
Once you establish that Zendesk is an authorized sender for your domain, you will need to add the service in your Enabled Senders list in Enforce.
1. Please go to your domain's Configuration page in Enforce.
2. Click on the + sign from the Enabled Senders section:
3. Choose Zendesk from the list of configurable senders and then click Enable:
We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.
Enable SPF alignment in Zendesk for your domain
You may notice that Zendesk emails are not authenticated via SPF, even after you have added Zendesk to your domain's configuration. This is likely caused by Zendesk not sending SPF aligned-mail and can be corrected by following the process detailed here.
As always, if you have any questions, please don't hesitate to submit a ticket.