Prevent spoofing and add Adobe Workfront SPF records

Problem

If users are not receiving Adobe Workfront email notifications, you need to add Workfront SPF records to your firewall. You must work with your IT team to add SPF records.

Access requirements

You must have the following access to perform the steps in this article:

Adobe Workfront plan Any
Adobe Workfront license Plan
Access level configurations

You must be a Workfront administrator. For more information, see Grant a user full administrative access.

NOTE: If you still don't have access, ask your Workfront administrator if they set additional restrictions in your access level. For information on how a Workfront administrator can modify your access level, see Create or modify custom access levels.

Solution

If you already added the IP addresses to your allowlist for your production environment as described in Configure your firewall’s allowlist and users are still not receiving emails:

  1. Add the following SPF record to your firewall:

    spf.workfront.com

    This automatically adds all Workfront IP addresses to your allowlist on your firewall and allows all spam filters (that use SPF records) to validate Workfront servers as valid senders for your domain.

    NOTE

    An SPF record is a TXT record that is part of a DNS zone file. We do not support modifying your DNS zone file.

  2. You must specify what type of SPF record needs to be configured. These are the valid types of SPF records:

    • all (https://dmarcian.com/spf-syntax-table/#all)
    • ip4 (https://dmarcian.com/spf-syntax-table/#ip4)
    • ip6 (https://dmarcian.com/spf-syntax-table/#ip6)
    • a (https://dmarcian.com/spf-syntax-table/#a)
    • mx (https://dmarcian.com/spf-syntax-table/#mx)
    • ptr (https://dmarcian.com/spf-syntax-table/#ptr)
    • exists (https://dmarcian.com/spf-syntax-table/#exists)
    • include (https://dmarcian.com/spf-syntax-table/#include)

    For example, “v=spf1 a mx include: spf.workfront.com -all”

If you cannot add SPF records to your firewall due to company policy, please work with your Workfront Support Representative.

On this page