Skip to content
SendPoint / Education
ESP setup

SendGrid domain authentication

Publish the records generated for the correct account, domain and authentication mode.

SendPoint referenceUpdated 1 min read

Select the correct account context

In SendGrid Sender Authentication, configure the actual domain and DNS host. Check the intended account or subuser before creating records. Automated security and manual configuration can produce different record sets; follow the selected workflow rather than combining unrelated instructions.

Publish the generated records

  1. Copy the record names, types and values generated for this domain. Do not reuse another account’s CNAME targets or verification identifiers.
  2. Create the records at the authoritative DNS provider. Account for interfaces that append the zone name automatically.
  3. Keep authentication CNAMEs compatible with the DNS-only requirements of the DNS host and SendGrid instructions.
  4. Run SendGrid verification and resolve the named failed record before retrying.

Inspect real mail

After verification, send through the intended production account and inspect the receiver’s authentication results. Compare DKIM d= and the envelope sender with the visible From domain. Domain authentication, link branding and inbox placement are separate concerns.

Maintain the configuration

SendPoint recommendation: keep account ownership, DNS ownership and the sending-domain inventory together. Before deleting records during a migration, check whether any subuser, transactional job or rollback route still depends on them.

Related: DNS publication and DMARC alignment.

Sources