Configuring SPF & DKIM Settings

Why configure SPF and DKIM records?

By setting up SPF and DKIM records, emails that come from your AdvocateHub will be properly branded with your email address as the sender. If you do not set up these records, emails from the AdvocateHub will appear like this: yourname@yourcompany.com via influitive.com. The sender and return address will also be email@influitive.com.

What are SPF and DKIM?

SPF stands for Sender Policy Framework. It is the first level of defense against "spoofing" as it lets receiving email servers know Influitive has permission to send emails on behalf of your company. DKIM stands for Domain Key Identified Record. It is a further guarantee to a user's email server that the email is legitimate. It can be thought of as a "digital signature" on your email.
Note: In order for your domain to be verified by our email service provider, SparkPost, you must have DKIM configured. They require this to ensure that nobody is trying to send illegitimate emails on your behalf.

Configuring SPF

This section is designed to make it easier to get your IT team to add the DKIM & SPF records and ensure that emails are getting to your advocates.
Follow the instructions below to add SPF records:
  1. Access your domain's DNS record
  2. Add the following to your SPF record: include:email.influitive.com
    1. Alternatively, add the IP: ip4:52.38.191.241

Watch your SPF lookups!

The number of SPF lookups is limited to 10. The email.influitive.com include will add 7 more lookups to your SPF record. It is likely that you will need to use the IP address instead (IPs do not take up any lookups).

Configuring DKIM

Follow these instructions to configure your DKIM:
  1. Access your domain's DNS record
  2. Add a new TXT record
Host/name: scph0416._domainkey. yourdomain.com
(Please replace "yourdomain.com" in the above host / name with your actual domain).
Value:
v=DKIM1; k=rsa; h=sha256; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDih5pVeAPRFdDHY+14sCpx2Alpv6Fa4TpfuTuvahTlynaArXq7NjLef5VaxM/qZ0jRzSK+9YSWW4ZgX56Oz/2rM+aZGcIQQeY9fnboRqOvj5yEUZE8Lb0TLOJ8LvwkI5gKn/T5soRcVcX9DQKmn/NbaRjXx1zSzEANc6NyxOfMDQIDAQAB
	


Template Email for your IT Department

Hi,
We are working on launching an advocate marketing program using the AdvocateHub, which is powered by a SaaS company called Influitive. They've asked us to make an adjustment to our DNS record to ensure emails I send from the system are delivered to our advocates (customers).
Currently, when we send emails through the AdvocateHub, the emails will display like: myname@mycompany.com via influitive.com. The emails are not authenticated and will have delivery issues. This will reduce the open rate of our emails which will have a direct impact on advocate engagement. It is important to keep advocates engaged as this translates into happy customers and value for our business. Removing the via influitive.com will also help us maintain proper branding.
This is the SPF record:
Type: TXT
Host: yourdomain.com
Value: include:email.influitive.com OR ip4:52.38.191.241
This is the DKIM record:
Type: TXT
Host: scph0416._domainkey. yourdomain.com
Value:
v=DKIM1; k=rsa; h=sha256; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDih5pVeAPRFdDHY+14sCpx2Alpv6Fa4TpfuTuvahTlynaArXq7NjLef5VaxM/qZ0jRzSK+9YSWW4ZgX56Oz/2rM+aZGcIQQeY9fnboRqOvj5yEUZE8Lb0TLOJ8LvwkI5gKn/T5soRcVcX9DQKmn/NbaRjXx1zSzEANc6NyxOfMDQIDAQAB
	
If you have any questions you can contact Influitive at support@influitive.com.
Thanks!


Is it Working?

Ultimately we recommend sending some test emails to truly get an idea as to whether everything is working perfectly. That said, below you can find all the ways we here at Influitive Support check SPF/DKIM records.

Check your SPF records

1. Go to http://www.kitterman.com/spf/validate.html

2. Enter you email domain (i.e. influitive.com), and click "Get SPF Record"

3. Check the SPF results

  • You should see: evaluating... SPF record passed validation test with pySPF (Python SPF library)!
    • If you see a failure, you'll need to give the error to your IT team.
  • In the SPF record, look for either of the following required items for sending emails from Influitive: ip4:52.38.191.241 or email.influitive.com.
    • If you do not see either of these, then your will need to ask your IT team to add one of them.

Check your DKIM record

2. Enter scph0416 in the "Selector" field and yourdomain.com in the "Domain name" field.
If the result is red and says, "This is not a good DKIM key record. You should fix the errors shown in red", then no DKIM is set up.
If the result is green and says, "This is a valid DKIM key record", then check that the value is under Public key is exactly the following:
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDih5pVeAPRFdDHY+14sCpx2Alpv6Fa4TpfuTuvahTlynaArXq7NjLef5VaxM/qZ0jRzSK+9YSWW4ZgX56Oz/2rM+aZGcIQQeY9fnboRqOvj5yEUZE8Lb0TLOJ8LvwkI5gKn/T5soRcVcX9DQKmn/NbaRjXx1zSzEANc6NyxOfMDQIDAQAB
	


DMARC Information

Firstly, let us just cover what DMARC is. DMARC, stands for “Domain-based Message Authentication, Reporting & Conformance”. It is an email authentication protocol. It builds on the widely deployed SPF and DKIM protocols, adding a reporting function that allows senders and receivers to improve and monitor protection of the domain from fraudulent email.
How does Influitive work with DMARC? The DKIM element of an email transaction sent from Sparkpost which is our email service provider will not meet the DMARC requirement, but the SPF element does. As long as one of these two works, the email will not be rejected for DMARC reasons by a receiving mail server with stringent DMARC requirements. For this reason as long as everything is good with the SPF check, there should be no DMARC failures.

Still need help? Contact Us Contact Us