Azure Communication Service - Cannot successfully verify SPF

Han Siong 40 Reputation points
2025-07-30T06:29:08.19+00:00

I am in the process of adding a client’s email domain to our Azure Communication Services (ACS) instance in order to configure a custom emailFrom address for outbound messaging. As part of this setup, we are required to validate the domain and verify SPF, DKIM, and DKIM2 records.

While domain validation and DKIM/DKIM2 verification have completed successfully, we are encountering issues with the SPF verification step.

Azure portal required us to add the below record for SPF verification
v=spf1 include:spf.protection.outlook.com -all

As part of an Office 365 user, we already have include:spf.protection.outlook.com as part of the SPF record, but it is not recognized. below is my existing spf record, any idea how to proceed here?

v=spf1 mx a include:servers.mcsv.net include:spf.protection.outlook.com include:_spf.psm.knowbe4.com ~all

Azure Communication Services
0 comments

Answer accepted by question author

TP 160.7K Reputation points Volunteer Moderator
2025-07-30T06:48:00.0833333+00:00

Hi,

You need to change ~all to -all in your SPF record. Azure Communication Services requires -all

Screenshot excerpt from documentation below:

User's image

Please note it may take some time for the above change to take effect, depending on your current TTL for your SPF record.

I recommend you reduce the TTL value for your SPF TXT record to low number, for example, 300 seconds (5 minutes), just in case you need to make additional changes while troubleshooting. Once you have it verified you can change it back to higher value.

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP

Was this answer helpful?

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.