Blog

How to Setup SPF for Salesforce?

October 11, 2023  |  2 min read
Salesforce

An SPF record is a type of Domain Name System (DNS) record that identifies which mail servers are authorized to send email on behalf of your domain. SPF records help to reduce the risk of your emails being marked as spam because they allow recipients to verify that the email is coming from a legitimate source.

How to Configure SPF for Salesforce

Salesforce’s bounce management would need to be turned off in order to allow SPF, which can be done by:

  • Go to:

Gear icon > Setup > Email > Deliverability in Lightning Experience

Setup > Email Administration > Deliverability in Salesforce Classic

  • Clearing the following checkboxes:
  1. Turn on bounce management.
  2. Facilitate adherence to common email security measures

The complete configuration should resemble this:

Worth noting if you want to keep allowing Salesforce to handle your bounce management, that’s perfect.  Your emails will be DMARC compliant as long as DKIM is configured appropriately for your domain.

How to Set Up SPF for SendGrid

  • Salesforce Integration for Your SPF Record
  • Access your DNS administration interface.
  • Go to the website where you wish to configure SPF for Salesforce.

Now, if your DNS already contains an existing SPF record:

To your old SPF record, you must add include:_spf.salesforce.com. Consequently, your new SPF record will be: v=spf1 include:_spf.google.com include:_spf.salesforce.com -all if your old record was:

v=spf1 include:_spf.google.com -all

Worth noting: Make sure your domain only has one SPF record enabled. Your SPF will be fully invalidated if there are more records.

Now, if your DNS system does not currently contain an SPF record:

Add the following DNS TXT SPF record to your DNS by simply doing this:

v=spf1 include:_spf.salesforce.com -all

With Skysnag, you can easily manage Salesforce’s SPF records without having to go to your DNS. This allows Salesforce’s SPF record to propagate instantly, and autonomously always pass SPF alignment.

Start a free trial today to see how it works for your domain.

For more information on setting up Salesforce’s SPF, you can refer to their reference documentation.

You can use Skysnag’s free SPF Checker to check the health of your SPF record here

You might be interested in reading:

Check your domain's DMARC security compliance

Enforce DMARC, SPF and DKIM in days - not months

Skysnag helps busy engineers enforce DMARC, responds to any misconfigurations for SPF or DKIM which increases email deliverability, and eliminates email spoofing and identity impersonation.

Start Free Trial