Email Authentication on Microsoft 365

Here we cover the steps to add the DNS records needed for Microsoft 365 email authentication in your cPanel.

Email is a critical component of many businesses, and as such, having reliable mail service is often a must. While you can utilize the email services included with cPanel to run your own mail server, this has become increasingly more difficult in recent years and often requires an experienced system administrator to maintain it.

With this in mind, the use of an established email service provider, such as Microsoft 365 or Google Workspace, is highly recommended in cases where email service is vital. Microsoft 365 (formerly known as Office 365) is a line of subscription services offered by Microsoft including Outlook, Microsoft Office, and much more.

Before you start using these services with your domain, you'll need to make some DNS changes. While you can opt to use Microsoft's nameservers to simplify the process, you may wish to continue managing your domain's DNS from your InMotion Hosting account instead.

Related Article

Set Up Microsoft 365 DNS Records

Add SPF record (Outlook, Exchange Online)

CAUTION: The steps below require that the domain is using InMotion Hosting nameservers.  If you're using an external nameserver, any DNS updates will need to be made on the external nameserver.

1. Log into cPanel
2. Navigate to Zone Editor, located under the Domains section
   
3. Click the Manage button next to the applicable domain
   
4. Click the down arrow next to the +Add Record button, then click Add "TXT" Record
   
    
5. Add the following values:
   1. Name: Enter your domain
   2. TTL: Leave this set to 900

   3. Record: v=spf1 include:spf.protection.outlook.com -all
      NOTE: If you already have an SPF record for your domain, don't create a new one for Microsoft 365. Instead, add the required Microsoft 365 values to the current record so that you have a single SPF record that includes both sets of values.
      EXAMPLE:

      v=spf1 +ip4:199.250.218.13 +include:smtp.servconfig.com +include:spf.protection.outlook.com  -all

6. Click the Save Record button
   NOTE: DNS modifications may take up to 4-24 hours to fully propagate.

Add DKIM Records

CAUTION: The steps below require that the domain is using InMotion Hosting nameservers.  If you're using an external nameserver, any DNS updates will need to be made on the external nameserver.

1. Log into Microsoft at security.microsoft.com/dkimv2
2. Select the domain
3. Click Create DKIM Keys
   NOTE: This will provide 2 CNAME records that will need to be added in the Zone Editor.
4. Create the CNAME records in the Zone Editor