Email Marketing & Email Marketing Automation

Maximize Your Deliverability with Marketing Cloud’s Sender Authentication Package

Most companies sending email truly underestimate how much deliverability can impact their organization. A beautiful, well-constructed, and highly effective email can wind up in the junk folder of someone who subscribed and wished to convert with your company. That’s a terrible situation to be in.

Even worse, you may not even realize that your emails are being routed to junk unless you’re using an inbox monitoring tool. My recommendation for this is our partners at 250ok, who I also use to monitor my inbox placement. They do this through providing a seed list and then monitoring those inboxes, then reporting to you whether or not your email made it to each major Internet Service Provider.

Your email reputation can be impacted by any number of issues, but most of it comes down to five issues:

  1. Configuration – are your domain and email server configured so that ISPs can authenticate that the emails are truly coming from your company?
  2. List – are your email addresses updated, valid, and opted into your email? If not, the chances of being reported as SPAM are significantly higher
  3. Reputation – is the sending IP known for sending SPAM via junk reports? Has it been blacklisted before?
  4. Volume – are you sending a large volume of emails? Bulk email sends absolutely trigger stricter monitoring of senders.
  5. Content – do you have red flags with terminology you’re utilizing in your email? Are you sending bulk emails with bad URLs, domains that have been flagged for malware, or are you lacking an unsubscribe link in your emails?

Marketing Cloud’s Sender Authentication Package

If you’re sending more than 250,000 emails per month and a Salesforce Marketing Cloud client, you should absolutely invest in their Sender Authentication package, which is a robust configuration to ensure you maximize the deliverability of those messages to the inbox. The Sender Authentication Package offers the following:

  • Private Domain – This product enables you do configure a domain used to send email. This domain acts as the From address for your email sends. Salesforce Marketing Cloud authenticates your email sends using the Sender Policy Framework (SPF), Sender ID, and DomainKeys/DKIM authentication.
  • Dedicated IP Address – This product assigns a unique IP address to your account so that your reputation is entirely yours. All email messages sent from your account via Marketing Cloud use this IP address. This IP address represents most of your sending reputation.
  • Reply Mail Management – This product controls the replies you receive from your subscribers. You can assign filters for out-of-office messages and manual unsubscribe requests.

Additionally, the package comes with Account Branding, where Marketing Cloud brands your account with your chosen authenticated domain. This product modifies link and image wrapping and removes all references to Marketing Cloud in favor of your authenticated domain.

Sender Authentication Package Video

Private Domain

Your private domain enables ISPs to authenticate as well as effectively communicate issues with your subscriber through feedback loops. Within the Sender Authentication Package, you’ll have to set up your DNS to enable quite a few subdomains for sending and response, as well as authentication keys. With subdomain delegation, also called zone delegation, you’re only transferring part of your existing domain to Marketing Cloud as part of your authenticated domain configuration. Marketing Cloud only uses the specified subdomain for appropriate activities.

Fully Qualified
Domain Name
DNS Record
@sample.domain.comMXAllows email sends using Marketing Cloud servers
bouncebounce.sample.domain.comMXTracks email sends and bounces
replyreply.sample.example.comMXAllows Reply Mail Management to handle filters and forwards replies to specific addresses
leaveleave.sample.domain.comMXAllows subscribers to unsubscribe
imageimage.sample.domain.comCNAMEPoints to Marketing Cloud image servers
viewview.sample.domain.comCNAMEPoints to Marketing Cloud View As a Web Page servers
clickclick.sample.domain.comCNAMEPoints to Marketing Cloud Click URL for tracking click-throughs
pagespages.sample.domain.comCNAMEPoints to Marketing Cloud microsite and landing page servers.
cloudcloud.sample.domain.comCNAMEPoints to Marketing Cloud’s cloud page servers.
mtamta.sample.domain.comAPoints to your dedicated IP Address
TXTAuthenticates DKIM and DK Selector
@sample.domain.comTXTSPF1 – SPF status authorizes bounce host in mfrom identity
bouncebounce.sample.domain.comTXTSPF1 for bounce host
replyreply.sample.domain.comTXTSPF1 for reply host

Wildcard Certificate

You’ll absolutely want to get a wildcard SSL certificate for your domain for Marketing Cloud to utilize as well. Accounts configured with SAP that do not use an SSL certificate show a secure Marketing Cloud domain on the properties of images in Content Builder. When you add the image to an email, the URL in the editor shows your custom domain setup with SAP. The copy link on the image properties page copies the custom domain for use in emails, landing pages, and browser.

IP Address Warming

Once the Sender Authentication Package is fully configured, the sending IP addresses must be warmed up. This is known as IP Warming. This is because the ISPs have no reputation associated with your IP address. If you just start sending everything through the new configuration, there’s a high risk of getting blocked. Most connections from new IP addresses are attempts to deliver unsolicited spam or other unwanted mail, so ISPs are suspicious of a new IP address sending mail.

Need assistance? My partners and I at Highbridge have launched our own platform, IP Warm, which cleanses your data, prioritizes your sends, and provides you with your campaign lists and schedules to minimize any risk of deliverability issues and to accelerate your deliverability reputation.

Douglas Karr, VP of Highbridge

The largest ISPs and webmail providers recommend that you build up a sending reputation on any new IP address by slowly and methodically sending in small volumes, then gradually increasing your volume of desirable mail to their users. This sending reputation is referred to as the warming or ramping up of your new IP address.

The goal is to build up approximately 30 days of desirable sending history and data so that ISPs have an idea of the mail coming from your new IP address. The ramp-up period can take longer than 30 days for some senders and a shorter time for others. Factors such as your overall list size, list quality, and subscriber engagement can influence the amount of time it takes for your IP address to be fully ramped up.

Marketing Cloud recommends that you focus on sending to your most active and engaged subscribers during this critical period since it can be the initial basis for the ISPs to determine your sender IP addresses sending reputation. Ramp up involves sending a limited number of messages per IP per day, so it may be necessary to further adjust your current sending practices as part of the process.

If you have questions or need assistance in implementing inbox monitoring or need help in configuring your Sender Authentication Package, you can request assistance form my new company, Highbridge. We’re a new Salesforce Partner and have done this work for hundreds of organizations. We can work with your Salesforce representative and get you fully configured, warmed up, and sending mails!

Contact Highbridge

Douglas Karr

Douglas Karr is the founder of the Martech Zone and a recognized expert on digital transformation. Douglas has helped start several successful MarTech startups, has assisted in the due diligence of over $5 bil in Martech acquisitions and investments, and continues to launch his own platforms and services. He's a co-founder of Highbridge, a digital transformation consulting firm. Douglas is also a published author of a Dummie's guide and a business leadership book.

Related Articles

What do you think?

This site uses Akismet to reduce spam. Learn how your comment data is processed.


Adblock Detected

Martech Zone is able to provide you this content at no cost because we monetize our site through ad revenue, affiliate links, and sponsorships. We would appreciate if you would remove your ad blocker as you view our site.