{"id":22744,"date":"2024-06-13T12:00:00","date_gmt":"2024-06-13T10:00:00","guid":{"rendered":"https:\/\/www.marketinet.com\/blog\/salesforce-email-authentication-for-pardot\/"},"modified":"2025-04-22T15:08:00","modified_gmt":"2025-04-22T13:08:00","slug":"salesforce-email-authentication-for-pardot","status":"publish","type":"post","link":"https:\/\/www.marketinet.com\/en\/blog\/salesforce-email-authentication-for-pardot\/","title":{"rendered":"Salesforce Email Authentication for Pardot"},"content":{"rendered":"<p>Email authentication allows companies\u00a0to send emails securely\u00a0. Additionally, it helps recipients&#8217; email servers identify if an email is sent from a real account and the sender exists.<\/p>\n<p><!--more--><\/p>\n<p>Looking ahead to 2024, if you use Pardot (Account Engagement) to send emails you must take into account the\u00a0SPF, DKIM and DMARC settings. In this article we will review each authentication method and provide a step-by-step guide to implementing SPF and DKIM policies in Pardot.<\/p>\n<h2>Email authentication definitions<\/h2>\n<ul>\n<li><strong>Protocols:<\/strong>\u00a0These were initially developed as<strong>\u00a0a way to strengthen the security<\/strong>\u00a0of SMTP (Simple Mail Transfer Protocol) and combat the rise of spam, since SMTP itself does not include authentication mechanisms. The following protocols have their own configuration and must be implemented and verified before sending emails from each platform.<\/li>\n<li><strong>SPF (Sender Policy Framework):<\/strong>\u00a0is an<strong>\u00a0email authentication technique used to prevent spammers from sending messages on behalf of your domain<\/strong>\u00a0. As a sender, you will be asked to add SPF records to your DNS to allow Pardot to send emails from your organization&#8217;s domain.<\/li>\n<li><strong>DKIM (DomainKeys Identified Mail):<\/strong>\u00a0is a protocol that<strong>\u00a0allows a company to take responsibility for the transmission of a message by signing it,<\/strong>\u00a0so that mailbox providers can verify it. Similar to SPF settings, DKIM requires a public key in DNS and the recipient&#8217;s email server will use this information to accept emails with the corresponding private key.<\/li>\n<li><strong>DMARC (Domain-based Message Authentication, Reporting, and Conformance):<\/strong>\u00a0is designed to<strong>\u00a0allow email domain owners to protect their domain from unauthorized use<\/strong>\u00a0(email spoofing). This protocol informs the recipients&#8217; email servers how to treat emails that come from the company&#8217;s domain.<\/li>\n<\/ul>\n<h2>How does email authentication work in Pardot Account Engagement?<\/h2>\n<p>While SPF verifies that the email is sent from an authorized sender, DKIM authenticates the email by comparing and validating public and private keys.<\/p>\n<p><img decoding=\"async\" data-src=\"https:\/\/www.marketinet.com\/wp-content\/uploads\/2024\/06\/blog\/Autenticaci%C3%B3n%20de%20email%20de%20Salesforce\/El%20email%20se%20env%C3%ADa.png\" alt=\"Autenticaci\u00f3n email Pardot\" width=\"647\" height=\"364\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" class=\"lazyload\" style=\"--smush-placeholder-width: 647px; --smush-placeholder-aspect-ratio: 647\/364;\" \/><\/p>\n<h2>Why implement authentication protocols?<\/h2>\n<p>There are multiple reasons to implement these protocols:<\/p>\n<ul>\n<li>The correct implementation of SPF, DKIM and DMARK can\u00a0<strong>protect the brand image of your company, your clients and leads<\/strong>\u00a0.<\/li>\n<li>These email authentication methods prevent\u00a0<strong><a href=\"https:\/\/www.marketinet.com\/blog\/intentos-estafa-suplantando-identidad-marketinet-whatsapp-telegram\" rel=\"noopener\">phishing<\/a><\/strong><strong>\u00a0attempts<\/strong>\u00a0, and mail servers may stop delivering emails that were not directly generated by your company.<\/li>\n<li>They also\u00a0<strong>affect the deliverability of the email.<\/strong>\u00a0If email authentication protocols are not configured correctly, the probability that clients will not receive them and that the email will end up in the spam folder is high.<\/li>\n<\/ul>\n<h2>Preparing to configure SPF\/DKIM<\/h2>\n<p>Before starting the SPF and DKIM configuration process,\u00a0you should contact\u00a0your company&#8217;s IT department in order to\u00a0find a list of domains available to use\u00a0on the new platform to learn the process of making changes in DNS. Depending on IT policy, this may take between 2 and 4 weeks.<\/p>\n<h3>How to Set Up SPF and DKIM in Pardot (Account Compromise)<\/h3>\n<p>1. Go to Pardot Settings &gt; Domain Management tab &gt; click Add New Domain.<\/p>\n<p><img decoding=\"async\" data-src=\"https:\/\/www.marketinet.com\/wp-content\/uploads\/2024\/06\/image-png-Jan-02-2024-11-57-46-9049-AM.png\" alt=\"Crear nuevo dominio Pardot\" width=\"767\" height=\"143\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" class=\"lazyload\" style=\"--smush-placeholder-width: 767px; --smush-placeholder-aspect-ratio: 767\/143;\" \/><\/p>\n<p>2. Enter the domain name &gt; click Create Domain.<\/p>\n<p>3. Once configured &gt; click on Expected DNS Entries &gt; copy the SPF, DomainKey_Policy and DomainKey Domain and Entry values \u200b\u200b&gt; send to the department. of IT in step 6.<\/p>\n<p><img decoding=\"async\" data-src=\"https:\/\/www.marketinet.com\/wp-content\/uploads\/2024\/06\/image-png-Jan-02-2024-11-58-05-3194-AM.png\" alt=\"Crear tracker domain en Pardot\" width=\"766\" height=\"237\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" class=\"lazyload\" style=\"--smush-placeholder-width: 766px; --smush-placeholder-aspect-ratio: 766\/237;\" \/><\/p>\n<p>4. Optional: While configuring SPF and DKIM settings, you can also create a tracking domain and submit the request in a single ticket to the ID department. Navigate to the Tracking domains section on the Domain Management page &gt; click Add Tracker domain.<\/p>\n<p><img decoding=\"async\" data-src=\"https:\/\/www.marketinet.com\/wp-content\/uploads\/2024\/06\/image-png-Jan-02-2024-11-59-14-7601-AM.png\" alt=\"Nuevo Tracker domain Pardot\" width=\"747\" height=\"199\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" class=\"lazyload\" style=\"--smush-placeholder-width: 747px; --smush-placeholder-aspect-ratio: 747\/199;\" \/><\/p>\n<p>5. On the same page, write down the validation key &gt; send to the department. of IT in step 6.<\/p>\n<p>6. Update the text below with the appropriate information for your instance and send it to the IT team.<\/p>\n<p><em>Hello [name],<\/em><\/p>\n<p><em>I&#8217;m working with the marketing team to implement Pardot, our new marketing automation platform. We will use Pardot to send communications to our customers and prospects from @yourdomain.com. To ensure high deliverability of email and custom URLs, we need to make the following changes:<\/em><\/p>\n<p><em>We need to configure SPF, DKIM and CNAME so that Pardot is authorized to send emails on our behalf.<\/em><\/p>\n<p><em>\u00a0<\/em><\/p>\n<p><em>&#8211;&gt; To configure SPF, you must add the following to the DNS entries:<\/em><\/p>\n<p><em>o Type: TXT<br \/><\/em><\/p>\n<p><em>o Entry: v=spf1 include:aspmx.pardot.com ~all<br \/><\/em><\/p>\n<p><em>\uf0a7 If an SPF record already exists in the DNS entry, simply add the following: include:aspmx.pardot.com<br \/><\/em><\/p>\n<p><em>&#8211;&gt; To configure DKIM, you must create DNS entries for DomainKey_Policy and DomainKey<br \/><\/em><\/p>\n<p><em>o DomainKey_Policy<\/em><\/p>\n<p><em>\uf0a7 Domain: _domainkey.yourdomain.com<br \/><\/em><\/p>\n<p><em>\uf0a7 TXT type<br \/><\/em><\/p>\n<p><em>\uf0a7 Input: t=y; o=~;<br \/><\/em><\/p>\n<p><em>or DomainKey<\/em><\/p>\n<p><em>\uf0a7 Domain: [insert host record here]._domainkey.yourdomain.com<br \/><\/em><\/p>\n<p><em>\uf0a7 Type: TXT<br \/><\/em><\/p>\n<p><em>\uf0a7 Entry: [insert host record here].<br \/><\/em><\/p>\n<p><em>&#8211;&gt;\u00a0 <\/em><em>To configure the tracking domain, you must create the CNAME and TXT records for go.yourdomain.com<\/em><\/p>\n<p><em>or CNAME<\/em><\/p>\n<p><em>\uf0a7 Domain: go.yourdomain.com<br \/><\/em><\/p>\n<p><em>\uf0a7 Address: go.pardot.com<br \/><\/em><\/p>\n<p><em>o TXT<\/em><\/p>\n<p><em>\uf0a7 Domain: @<br \/><\/em><\/p>\n<p><em>\uf0a7 Entry: [insert validation key here]<br \/><\/em><\/p>\n<p><em>&#8211;&gt; <\/em><em>Please let me know when all of these steps have been completed so we can complete the setup process within Pardot. Please feel free to contact us with any questions.<\/em><\/p>\n<p><em>Greetings,<\/em><\/p>\n<p><em>Marketing operations<\/em><\/p>\n<p>7. Once the IT team adds the DNS entries, follow these steps to validate and commit the changes.<\/p>\n<p>Pardot Settings &gt; Domain Management tab &gt; click Check DNS Entries in the Email Sending Domains section. If the correct DNS entries are added, you should see the following screen.<\/p>\n<p><img decoding=\"async\" data-src=\"https:\/\/www.marketinet.com\/wp-content\/uploads\/2024\/06\/image-png-Jan-02-2024-11-59-35-0672-AM.png\" alt=\"email sending domains Pardot\" width=\"886\" height=\"227\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" class=\"lazyload\" style=\"--smush-placeholder-width: 886px; --smush-placeholder-aspect-ratio: 886\/227;\" \/><\/p>\n<p>To validate the Tracker domain &gt; click validate in the Tracker domain section. If CNAME is set correctly, we should see the following screen.<\/p>\n<p><img decoding=\"async\" data-src=\"https:\/\/www.marketinet.com\/wp-content\/uploads\/2024\/06\/image-png-Jan-02-2024-11-59-53-2788-AM.png\" alt=\"Trackers domain Pardot\" width=\"886\" height=\"292\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" class=\"lazyload\" style=\"--smush-placeholder-width: 886px; --smush-placeholder-aspect-ratio: 886\/292;\" \/><\/p>\n<p>8. If the validation fails for some reason,\u00a0you can use platforms like\u00a0<a href=\"http:\/\/mxtoolbox.com\/\" target=\"_blank\" rel=\"noopener\">mxtoolbox.com<\/a>\u00a0to compare the input values \u200b\u200byou provided to your IT team with the ones they added to DNS. Enter your domain name on the following pages and you will be able to see the existing DNS entry values.<\/p>\n<p>To review SPF records, visit\u00a0<a href=\"https:\/\/mxtoolbox.com\/spf.aspx\" target=\"_blank\" rel=\"noopener\">https:\/\/mxtoolbox.com\/spf.aspx<\/a>\u00a0. If SPF has been configured correctly, you should see v=spf1 include:aspmx.pardot.com ~all instead of v=spf1 -all.<\/p>\n<p>You can follow similar steps to check DKIM and DMARC records. Alternatively, you can\u00a0request a screenshot of the\u00a0published DNS records from your IT team for verification.<\/p>\n<p>Email authentication is an essential part of secure communication with recipients. <strong>If you&#8217;re still having trouble validating your SPF or DKIM records in Pardot,\u00a0please contact\u00a0<a href=\"https:\/\/www.marketinet.com\/contactar\" target=\"_blank\" rel=\"noopener\">us<\/a>\u00a0and we&#8217;ll be happy to help\u00a0.<\/strong><\/p>\n<hr \/>\n<p><span id=\"hs_cos_wrapper_post_body\" data-hs-cos-general-type=\"meta_field\" data-hs-cos-type=\"rich_text\">If you liked this article, you might also be interested in:<\/span><\/p>\n<ul>\n<li><a href=\"\/en\/blog\/benefits-calendar-links-account-engagement\" target=\"_blank\" rel=\"noopener\"><span id=\"hs_cos_wrapper_name\" data-hs-cos-general-type=\"meta_field\" data-hs-cos-type=\"text\">Benefits of Calendar Links in Account Engagement<\/span><\/a><\/li>\n<li><a href=\"\/en\/blog\/mapping-salesforce-crm-marketing-cloud-account-engagement-fields\" target=\"_blank\" rel=\"noopener\"><span id=\"hs_cos_wrapper_name\">Mapping Salesforce CRM and Marketing Cloud Account Engagement Fields &#8211; MCAE\/Pardot<\/span><\/a><\/li>\n<li><a href=\"\/en\/blog\/how-to-retrieve-utms-in-forms-with-pardot-iframe\" target=\"_blank\" rel=\"noopener\"><span id=\"hs_cos_wrapper_name\">How to retrieve UTMs in forms with Pardot IFRAME<\/span><\/a><\/li>\n<\/ul>\n<p>\u00a0<\/p>\n<p>\u00a0<\/p>\n\n\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/www.marketinet.com\/en\/ebooks\/free-ebook-pardot-campaign-management?utm_source=blog&amp;utm_medium=inbound&amp;utm_campaign=cta_recurso_blog_ebook_gesti\u00f3n_de_campa\u00f1as_de_pardot_en_salesforce_-_en\"><img decoding=\"async\" width=\"783\" height=\"193\" data-src=\"https:\/\/www.marketinet.com\/wp-content\/uploads\/2024\/06\/Captura.-en.png\" alt=\"\" class=\"wp-image-26523 lazyload\" data-srcset=\"https:\/\/www.marketinet.com\/wp-content\/uploads\/2024\/06\/Captura.-en.png 783w, https:\/\/www.marketinet.com\/wp-content\/uploads\/2024\/06\/Captura.-en-480x118.png 480w\" data-sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) 783px, 100vw\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 783px; --smush-placeholder-aspect-ratio: 783\/193;\" \/><\/a><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>Email authentication allows companies\u00a0to send emails securely\u00a0. Additionally, it helps recipients&#8217; email servers identify if an email is sent from a real account and the sender exists.<\/p>\n","protected":false},"author":31,"featured_media":22808,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[1],"tags":[232],"class_list":["post-22744","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-sin-categorizar","tag-salesforce-email-authentication"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.marketinet.com\/en\/wp-json\/wp\/v2\/posts\/22744","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.marketinet.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.marketinet.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.marketinet.com\/en\/wp-json\/wp\/v2\/users\/31"}],"replies":[{"embeddable":true,"href":"https:\/\/www.marketinet.com\/en\/wp-json\/wp\/v2\/comments?post=22744"}],"version-history":[{"count":0,"href":"https:\/\/www.marketinet.com\/en\/wp-json\/wp\/v2\/posts\/22744\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.marketinet.com\/en\/wp-json\/wp\/v2\/media\/22808"}],"wp:attachment":[{"href":"https:\/\/www.marketinet.com\/en\/wp-json\/wp\/v2\/media?parent=22744"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.marketinet.com\/en\/wp-json\/wp\/v2\/categories?post=22744"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.marketinet.com\/en\/wp-json\/wp\/v2\/tags?post=22744"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}