This article covers the SPF and DKIM authentication processes for iCIMS and how they are managed in Valimail Enforce. While only one of the two authentication methods is required for an email to pass DMARC, our recommendation is to configure both whenever possible.

iCIMS does not sent SPF aligned emails by default.


Configuring DKIM authentication for your iCIMS emails

To enable DKIM in iCIMS fro your domain(s), you will need to contact iCIMS by submitting a case to iCIMS Technical Support.

iCIMS will then provide a pair of 2048 bit rate CNAME records to facilitate automatic key rotation. A DKIM key will be hosted in the iCIMS system's DNS.

Specific email domains for sending must be identified. DKIM keys are not automatically portable to just any email domain. 

Note: You must specify the email domain(s) the DKIM key will be applied to in your authentication request. 

Important Note: Emails will continue to send from the system email domain (e.g., your-company-name+autoreply@agents.icims.com) until all email authentication methods have been implemented and validations checks have been passed.

You can also find the instructions on how to set up DKIM and SPF for iCIMS, here.

Add an iCIMS DKIM key in Enforce

1. Go to your domain's Configuration page in Valimail Enforce and publish the newly created DKIM key.

    a. Scroll down and add the two DKIM keys in your configuration, by clicking on Add a DKIM key

    b. Enter the selector name, CNAME target value, associate the key/s with iCIMS and then click Add.

a screenshot of a computer

You can find more detailed information on how to add a DKIM key in Valimail Enforce here. 

Configuring SPF authentication for your iCIMS emails

Once you establish that iCIMS is an authorized sender for your domain, you will need to add the service in your Enabled Senders list in Enforce.

1. Please go to your domain's Configuration page in Enforce.

2. Click on the + sign from the Enabled Senders section:

a screenshot of a email

3. Choose iCIMS from the list of configurable senders and then click Enable:

a screenshot of a computer

We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.

As always, if you have any questions, please don't hesitate to submit a ticket.