Setting Up Sender Authentication Package(SAP) for Marketing Cloud Account

Sender Authentication Package(SAP) is additional product of salesforce on top of the Marketing cloud license, which helps increasing the brand value of your brand using different product such as :

  1. Private Domain
  2. Account Branding
  3. Dedicated IP
  4. Reply Mail Management

Sender Authentication Package (SAP) helps your subscribers identify your brand and increases awareness of your brand, which in- turn increases your brand(domain) reputation and thus increasing your email deliverability. In this post we will discuss the step by step process to configure SAP with private domain for your Marketing Cloud Account.

Salesforce reccomends using a dedicated domain or sub-domain to send emails from marketind cloud. This domain usually works as the from address for the email sends from the marketing cloud account. When a SAP package is purchased, Salesforce authenticates email sends using the Sender Policy Framework (SPF), Sender ID, and DomainKeys/DKIM authentication. Salesforce provides mutiple options with SAP configuration such as :

  1. Salesforce buys the domain for you and configures SAP on it, this domain is used dedicatedly for Marketing cloud
  2. Delegate an existing domain or a sub-domain that you own. Salesforce will authenticate this domain/sub-domain for you.
  3. Self host DNS using a Domain/sub-domain you own.

The 2nd scenario is the most common scenario and set-up that we see, as customers are most likely to use a part of their existing domain for Email Marketing. This step requires delegating the sub-domain to marketing cloud in your DNS entries: Lets jump to the steps now.

Step 1:
Decide on the domain, or sub domain name. It is important to understand that once your domain is setup, any changes to it will be of additional cost to you from Salesforce.

Step 2:
Once you have you domain/subdomain ready, DNS entries need to be made to delegate it to Marketing cloud. The detailed step can be found in this help document

Step 3:
After you complete your DNS entries, submit the SAP form with the link received from Salesforce. Salesforce usally takes 2-3 working days to complete the configuration

Step 4:
After you receive the confirmation from Salesforce on the SAP configuration, create necessary configuration in your marketing cloud account for sending emails, which includes:
1. From Address Creation with the verified SAP domain: Since the domain is already verified, any from address you create with it will be automatically verified.
2. Creation of Sender Profiles : Create Sender profiles as per your customer requirement using the From address from the authenticated domain.
3. Creation of Send Classification : Create Send Classification using the Sender profiles you created earlier. Usually you will need different send classification for your newsletter, commercial and transactional emails.

Step 5:
With the confimation email of your SAP configuration, your should ideally receive instructions to audit your sender score. To do it you will need to send an email to “cssreputation@etreputation.com” from the newly created send classficication and raise a Salesoforce case to Salesforce with the following information:
1. Subject line
2. From Name
3. Approfximate Email Send time
Salesforce will provide you the sender score for your email domain. A score of 90 or higher is considered good. Details can be found here

Your Domain Authentication is complete with the above step, and you would be ready to send emails from your new domain. The Reply Mail Management, and Dedicated IP configuration are different topics and we will discuss then in another post. Feel free to leave your questions/feedback.

Thank You and Stay Safe.

1 thought on “Setting Up Sender Authentication Package(SAP) for Marketing Cloud Account”

Leave a comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.