Prevent spoofing and add Adobe Workfront SPF records


If users are not receiving Adobe Workfront email notifications, you need to add Workfront SPF records to your firewall. You must work with your IT team to add SPF records.

Access requirements

You must have the following access to perform the steps in this article:

Adobe Workfront plan
Adobe Workfront license
Access level configurations

You must be a Workfront administrator. For more information, see Grant a user full administrative access.

NOTE: If you still don't have access, ask your Workfront administrator if they set additional restrictions in your access level. For information on how a Workfront administrator can modify your access level, see Create or modify custom access levels.


If you already added the IP addresses to your allowlist for your production environment as described in Configure your firewall’s allowlist and users are still not receiving emails:

  1. Add the following SPF record to your firewall:

    This automatically adds all Workfront IP addresses to your allowlist on your firewall and allows all spam filters (that use SPF records) to validate Workfront servers as valid senders for your domain.

    note note
    An SPF record is a TXT record that is part of a DNS zone file. We do not support modifying your DNS zone file.
  2. You must specify what type of SPF record needs to be configured. These are the valid types of SPF records:

    • all (
    • ip4 (
    • ip6 (
    • a (
    • mx (
    • ptr (
    • exists (
    • include (

    For example, “v=spf1 a mx include: -all”

If you cannot add SPF records to your firewall due to company policy, please work with your Workfront Support Representative.