How to Set Up Salesforce SPF Record?

Setting up SPF Salesforce will allow Salesforce to send emails on behalf of your domain, without failing DMARC authentication.

Moreover, when you send emails via Salesforce, you would want your emails to be received by your receivers as coming from youdomain.com instead of salesforce.com. The latter can cause problems in email deliverability and increase the chances of your emails being marked as spam. This is why you need to set up SPF for salesforce.

Steps to Setup SPF for Salesforce

To enable SPF on Salesforce, salesforce's bounce management would need to be disabled, which can be done by: 

1. Navigating to: 

In Lightning Experience: Gear icon | Setup | Email | Deliverability

In Salesforce Classic: Setup | Email Administration | Deliverability

2. Un-checking the following boxes: 

a. Activate bounce management

b. Enable compliance with standard email security mechanisms

The final settings should look as follows: 

Note: If you want to continue having Salesforce handle your bounce management, that is fine. As long as DKIM is correctly setup for your domain, your emails will be DMARC compliant.

Adding Salesforce to Your SPF Record

• Login to your DNS management console 
• Navigate to the domain for which you want to setup SPF for Salesforce

Now, If you have a pre-existing SPF record in your DNS: 

You need to add include:_spf.salesforce.com to your previous SPF record. Hence, if your previous SPF record was v=spf1 include:_spf.google.com -all, your new record will be: 

v=spf1 include:_spf.google.com include:_spf.salesforce.com -all

Note: Make sure you have only 1 SPF record configured for your domain. More than one record will completely invalidate your SPF. 

Now, If you don’t have a pre-existing SPF record in your DNS:

Simply add the following DNS TXT SPF record to your DNS: 

v=spf1 include:_spf.salesforce.com -all