Engagement - Private Domain: DKIM, SPF, and DMARC Authentication FAQ

How to Purchase and Configure a Private Domain

Private Domain is a paid product. To purchase, contact your Salesforce Account Executive (AE). Once purchased:

1. Navigate to Setup > Security > Domain SSL Certificates in your Marketing Cloud Engagement account.
2. Follow the configuration steps in Configure a Sender Authentication Package or Private Domain.

Private Domain FAQ

Can a Private Domain be shared across multiple accounts?

Yes, it can be used in any other business unit once it has been added to the account as an Authenticated Domain in From Address Management. If the domain has not been added, please reach out to Marketing Cloud Engagement Support.  
 

Can our account have multiple Private Domains applied to it?

Yes, an account can have as many authenticated sending domains as they would like.  For example, you can add Private Domains for sending from different brands operating within a single account.
 

How do Private Domains affect the "One brand per account" limit?

Private Domains are different from the account “branding” you get via SAP set-up. Private Domains will not include link and image wrapping within a client account.
 

Can we use a Private Domain if we have a low volume?

Yes. Private Domain does not include a Dedicated IP address (a sending IP assigned exclusively to your account). It is an authentication only product  it adds DKIM and SPF signatures to your outgoing emails without affecting your IP assignment. This makes it suitable for any sending volume.

How do we change an existing Private Domain on our account?

Private Domain changes require the purchase of a new Private Domain from your Account Executive.

Can I configure our Corporate (website) domain as a Private Domain?

You can configure your Corporate domain as a Private Domain in order to authenticate it (with DKIM, SPF and DMARC). However, you will be required to host the DNS records on your side. Marketing Cloud Engagement Support does not troubleshoot DNS issues when a client has chosen to self-host.