Connecting Azure DNS lets DMARCER read your DNS zones and apply the fixes you approve, so you do not have to make the changes by hand.
Step 1: Create a service principal in Microsoft Entra
- In Microsoft Entra, create a service principal (an app registration) for DMARCER.
- Give it the 'DNS Zone Contributor' role on the resource group that holds your DNS zones.
- Make a note of your Entra tenant ID, the service principal's client ID and client secret, your subscription ID, and the resource group name. You will need these in the next step.
Step 2: Add the integration in DMARCER
- Open Integrations and click Add.
- Choose DNS, then Azure DNS.
- Enter the tenant ID, client ID, client secret, subscription ID and resource group.
- Give the connection a friendly name, leave test mode and zone sync ticked, then click Connect.
DMARCER safely encrypts your credentials, checks the connection and finds your zones. While test mode is on, nothing is changed in your real DNS.
Step 3: Go live
Have a look through the zones that were found, then switch the integration from Test to Live so that approved changes can be applied.
What happens next
With Azure DNS connected, DMARCER can apply fixes for you at the click of a button and look after SPF, MTA-STS and DKIM for your zones.
Was this article useful?
Be the first to vote.