Saviynt provides email services using AWS SES for sending outbound emails. It supports both SPF as well as DKIM.
There are two ways to achieve DMARC (Domain-based Message Authentication, Reporting & Conformance) validation:
DomainKeys Identified Mail (DKIM)
- DomainKeys Identified Mail (DKIM) is an email security standard designed to make sure that an email that claims to have come from a specific domain was indeed authorized by the owner of that domain.
- If customer is using an email address with @saviynt.com domain, we already have the needful done on our end to support DKIM.
- If customer is using a custom domain of their own, we would add the domain <Customer domain name> on our end and provide the Publish DNS records from AWS to customer. The three CNAME records provided by Saviynt will then need to be published (added) to customer's DNS provider.
Sender Policy Framework (SPF)
- Sender Policy Framework (SPF) is an email validation standard that's designed to prevent email spoofing. Domain owners use SPF to tell email providers which servers are allowed to send email from their domains. To set up SPF,
- If customer is using an email address with @saviynt.com domain, we already have the needful done on our end to support SPF.
- Saviynt will provide a TXT record to publish in the DNS configuration for <Customer domain name> This record contains a list of the servers that customer would authorize to send email. When an email provider receives a message from the domain, it checks the DNS records in customer's domain to make sure that the email was sent from an authorized server.
NOTE - Please note that Saviynt does not offer AWS SES service as a default option for email. Customers are advised to utilize their own SMTP service because of following reasons:
- Privacy and security - Emails may contain sensitive information such as usernames and passwords, and it is crucial for customers to have full control over them. They can ensure this by using their own service and implementing the necessary security measures.
- Monitoring - customer manage their own email monitoring and can control type of emails that are sent by the solution.
