How to Enable Domain Keys Identified Mail (DKIM) for SAP Business ByDesign

In SAP Business ByDesign, you can communicate with employees and business partners through email. To ensure proper security measures, SAP has implemented Domain Keys Identified Mail (DKIM) to perform authentication checks on sender email addresses added by internal users.

As part of SAP’s ongoing efforts to improve email security, they have made it mandatory to enable DKIM on sender email domains. All SAP Business ByDesign users must enable their DKIM by March 31^st, 2022 to ensure that outbound emails sent from SAP Business ByDesign using sender email domains will be delivered.

Below are instructions on how to enable your DKIM – for more information check out SAP’s blog here.

How to Request DKIM For Your Email Sender Domain Address

First, create an incident with SAP Business ByDesign Support which includes your sender domain address details that you are currently using in your tenant to relay business emails.

If you have multiple domains, provide support the complete list, including any sub-domains. After March 31^st, it is mandatory for domains to be signed with DKIM key if sending emails from your ByDesign tenant. Emails will be classified as spam if DKIM is not enabled.

The DKIM key that will be generated is meant for both test and production environments.

How to Enable DKIM Key

This service request will take approximately 2 weeks to enable and implement the DKIM key. After SAP has generated the DKIM based on the information provided above, users must create a DKIM TXT record in their DNS server. Ensure that you submit your request by mid-March in order to give SAP enough time to generate the DKIM key prior to the change.

Next, check to see if the key is maintained correctly through external tools such as dkimcore.org/tools/keycheck.html. Here you will enter Selector > enter Domains > and click on check. If a green checkmark appears the key is correctly maintained.

Once you’ve received this confirmation, send the incident back to SAP to activate the key. After this, SAP will activate the key for the mentioned domains and the incident will be closed.

If you have any questions on this enhanced safety measure or are looking for help to locate your domain address or submit an incident to SAP, please reach out to your CSM.