On the Domain Setting page, you view the list of email domains that generate outgoing emails from Autotask PSA, and configure DKIM authentication settings for those domains. To open the page, use the path(s) in the Security and navigation section above.
DKIM (Domain Keys Identified Mail) is an email authentication technique that allows the recipient to check that an email was indeed sent and authorized by the owner of that domain. This is done by giving the email a digital signature. This DKIM signature is a header that is added to the message and is secured with encryption.
Once the recipient determines that an email is signed with a valid DKIM signature, it’s certain that parts of the email among which the message body and attachments haven’t been modified. The validation is done on the server level, so DKIM signatures are usually not visible to end-users.
Since DKIM authentication provides a higher level of trust, implementing the DKIM standard will result in more emails getting delivered.
The Domain Settings list is created by Autotask PSA, by querying the email addresses from the sources listed below, and consolidating them by their domains. You are not able to create new domains on this page. You can only create SPF records for the domains you are using, and authenticate the domains.
There are a number of areas in Autotask PSA that generate outgoing emails. All outgoing email is associated with a From: address, which could potentially be spoofed.
The following From: email addresses exist in Autotask PSA:
- The Support Email Address. Refer to Configuring a support email address default.
- Alternate Send From Email Addresses (up to 5 per company). Refer to Alternate Send From Email Addresses.
- Send from Resource Email (all active and inactive resources). This is the primary email address associated with resource user accounts. Refer to Complete the General tab.
- Notification Template - Send From: Other. In addition to using one of the three already mentioned email addresses, you can manually configure an Other email address as the Send Email From address for each notification template. Refer to Adding or editing notification templates.
- Invoices. Defaults to the email address of the user who publishes the associated invoice. To display a different email address, for example, a departmental mailbox, enter that address.
- Surveys. Survey email messages can use either the Support Email Address or one of the Alternate Send From Email Addresses as the Send From address, or an address that is entered manually.
- Contact Groups. Contact Group emails can use either the Support Email Address or one of the Alternate Send From Email Addresses as the Send From address, or an address that is entered manually. By default, Other and the logged in user's email address and name are selected.
- Workflow Rules. The Send From email address can be the initiating resource's, the Support Email Address or one of the Alternate Send From Email Addresses, or an address that is entered manually.
Number of domains
Your database will contain two system domains, autotask.com and datto.com. They are already authenticated, and cannot be disabled.
You can authenticate up to 5 additional valid domains.
Domains are found based on the various email addresses entered and used within Autotask PSA. The domain name starts after the @ character of an email address.
In this example, .com is the top-level domain; mail is the secondary level domain.
A valid domain must meet the following requirements to be available for authentication:
- A . (period) before the top level domain
- At least 3 characters/numbers before period
- At least two characters in the extension (.io, .tv )
- A minimum of 3 and a maximum of 63 characters before to top level
- Begin with a letter or a number and end with a letter or a number
- Use the English character set and may contain letters (i.e., a-z, A-Z), numbers (i.e. 0-9) and hyphens (-), or a combination of these
- Neither begin with nor end with a hyphen (-)
- Not contain a hyphen in the third and fourth positions (e.g. www.ab- -cd.com)
- Not include a space (e.g. www.ab cd.com)
- Not include underscore (e.g www.ab_cd.com)
ICANN maintains a list of valid top-level domains - everything after the . (period)
EXAMPLE Examples of valid domains:
llanfairpwllgwyngyllgogerychwyrndrobwllllantysiliogogogoch.co.uk (Guinness Certified World's Longest Domain Name)
EXAMPLE Examples of invalid domains:
.com (secondary domain missing)
a.c (not a valid primary domain)
joe smith.com (space in the secondary domain)
-joe.co (hyphen in the first position of the secondary domain)
msp-man-.com (hyphen in the last position of the secondary domain)
Domain Settings list columns
The Domain Settings page contains a list of all domains Autotask PSA has found in your database. The list contains the following columns:
The top, secondary and any subsequent levels of the domain, essentially everything after the @ character in the email address.
Contains a check mark for the system domains that are always authenticated, plus up to 5 additional domains that you have authenticated.
Support Email Address
Identifies the domain that is used for the Support Email Address.
Contains a check mark for the system domains.
- On the Domain Settings page, hover over the context menu and click Authentication Details. The Domain Authentication dialog for the selected domain will appear.
- Check the following settings:
The SPF Settings section references the SPF record that should already have been created.
Creating an SPF record in your domain's DNS will authorize Autotask PSA to send email messages on your behalf. An SPF record must be created for any domain that is sending mail from the Autotask PSA system.
EXAMPLE customerdomain.com. 18000 IN TXT "v=spf1 include:autotask.net ~all"
CNAME Record Name
Before you click Authenticate Domain, make sure that the CNAME Record Name and the CNAME Value are entered in your domain's DNS.
If you know the name of the data center that hosts your database, you only need to add its address range to your allowlist. Refer to Where am I hosted?
NOTE To ensure that your customers can receive notifications from Autotask PSA, advise them to create the same allowlist entries.
|Data center||IP Range||CIDR Range||IP/Subnet Mask|
|Munich (MUC)||22.214.171.124 - 126.96.36.199
188.8.131.52 – 184.108.40.206
220.127.116.11/29 / 18.104.22.168-22.214.171.124 / 126.96.36.199 255.255.255.248
|Philadelphia (PHL)||188.8.131.52 – 184.108.40.206||220.127.116.11/24||18.104.22.168 255.255.255.0|
NOTE We have provided each data center's address in three formats for maximum compatibility with your vendor's spam filter solution. Regardless of the format, the same range of IP addresses is represented. You only need to enter one address per data center.