You are here:
Configure a Sender Authentication Package or Private Domain
Set up your domain to use authenticated email sending and a branded URL. To improve email deliverability and assure your customers that your messages are legitimate, turn on authenticated email sending. When you use a branded URL, the images and tracked links in your messages use a domain that you own instead of a generic one that Salesforce owns.
Authenticated email sending is on by default when you use Sender Authentication Package (SAP) and is an optional feature with a private domain.
-
From Setup, in the Quick Find box, enter ssl, and then select
Domain SSL Certificates.
Note The Sending Domain Records table lists existing sending domains. The Domain Records table lists branded URLs with their DNS and SSL status. This view also provides usage details for SAP, Private Domain, and SSL certificate licenses.
-
To configure a sending domain, click New Domain.
Note If this button is turned off, a SAP or Private Domain license isn’t available.
-
Enter a valid domain name and email address.
Note The email address can belong to any domain. Marketing Cloud Engagement uses this address to send notifications about DNS configuration issues and SSL certificate renewals.
-
Select whether the domain is for email authentication and URL branding or only email
authentication, and then click Next. If the domain is in use
already, enter a different one.
Note If the email authentication and URL branding option isn’t available, a new SAP license is required. If the email authentication-only option isn’t available, a new Private Domain license is required.
-
Select the IP address configuration that fits your requirements.
- Salesforce shared IP—If you plan to send fewer than 100,000 emails per month, select this option. Don’t select this option for a new sending domain on a tenant that was configured previously with a dedicated IP address.
- New dedicated IP—If you plan to send more than 250,000 emails per month, select this option. You can also select this option when sending more than 100,000 emails per month. Next, select whether the email sends are commercial, transactional, or both. This option is available only for domains used for email authentication and URL branding.
- Current dedicated IP—To use an IP address that you purchased previously, select it from the dropdown list. Next, select the email send type.
-
To use Reply Mail Management (RMM), select Yes, and enter a
forwarding email address.
Note RMM is available if you’re configuring this domain for email authentication and URL branding.
- Select how to manage DNS, and then click Next.
- Review the domain configuration options, and then click Submit. The confirmation page provides instructions about DNS delegation management.
- If you delegated DNS management to Salesforce, configure your DNS server to point to the Marketing Cloud Engagement servers listed in Custom Domain or Subdomain Delegation.
- For a self-hosted DNS, go to the Sending Domain list on the main page, and select Download Zone File from the domain’s action menu. Apply the zone file to the DNS configuration for your domain.
View the status of your domain in the Sending Domain Records table on the domain management page.
- Pending DNS validation—The DNS changes haven't been validated yet. The process continues only after you complete the DNS configuration for your domain.
- In progress—The DNS changes have been detected, and the domain is being set up. Setup can take up to five business days to complete.
- Active—The domain is ready to use.
To cancel a submitted request before the domain is active and configured, select Stop Configuration from the domain’s action menu. If Stop Configuration is turned off or if you want to change your domain settings after the initial setup process, contact your account executive or Salesforce Support.

