[ Sending-service guides ]

Authenticate Oracle B2C Service OCI Mail while preserving the RightNow scope boundary

Use the public Configuration Assistant e-Domains workflow only for confirmed B2C Service OCI Mail tenants; keep legacy RightNow routes and unverified SPF settings on hold.

By the EmailAuth research team · 6 min read

[ Key points ]

  • Confirm the narrower B2C Service e-Domains deployment first.
  • Publish the exact selected-domain DKIM record.
  • Keep legacy RightNow, SPF and sender-approval gaps explicit.
On this page
  1. Key points
  2. Takeaway
  3. By role
  4. Frequently asked questions
  5. Sources
  6. Glossary
  7. Related guides

[ Takeaway ]

Keep legacy RightNow, SPF and sender-approval gaps explicit.

[ By role ]

What this means for you

Choose your role for practical next steps.

IT / Mail Admin

Bind records to the correct tenant

The generated selector must belong to the application sending the message.

Next steps

  1. Confirm e-Domains applicability.
  2. Publish the exact issued record.
  3. Test every outbound mailbox route.

CISO / SecOps

Retain the legacy scope hold

Public OCI Mail instructions do not establish all RightNow deployments.

Next steps

  1. Review deployment evidence.
  2. Require aligned receiver results.
  3. Keep unknown SPF and approval controls unresolved.

Founder / Non-technical

Keep support communication stable

A wrong Oracle product recipe can interrupt customer responses.

Next steps

  1. Name the actual support platform.
  2. Approve the test workflow and fallback.
  3. Require evidence before broad rollout.

[ FAQs ]

Frequently asked questions

Does this cover every RightNow deployment?

No. It covers the documented B2C Service Configuration Assistant OCI Mail branch only. Legacy and other routes remain held.

Oracle B2C Service OCI Mail e-Domains Oracle B2C Service Add DKIM for a Domain SPF RFC 7208 DKIM RFC 6376 DMARC RFC 9989

Where is the DKIM record obtained?

From Configuration Assistant e-Domains after Add DKIM succeeds for the selected domain and unique selector.

Oracle B2C Service OCI Mail e-Domains Oracle B2C Service Add DKIM for a Domain SPF RFC 7208 DKIM RFC 6376 DMARC RFC 9989

Can I copy an OCI record from another tenancy?

No. A record must correspond to the service that signs this workflow.

Oracle B2C Service OCI Mail e-Domains Oracle B2C Service Add DKIM for a Domain SPF RFC 7208 DKIM RFC 6376 DMARC RFC 9989

Is the copied record a private key?

The record is public DNS material. Do not request or publish private signing keys.

Oracle B2C Service OCI Mail e-Domains Oracle B2C Service Add DKIM for a Domain SPF RFC 7208 DKIM RFC 6376 DMARC RFC 9989

Which SPF include should I use?

This research does not establish a tenant-specific value. Obtain the prescription for the confirmed deployment and SMTP identity.

Oracle B2C Service OCI Mail e-Domains Oracle B2C Service Add DKIM for a Domain SPF RFC 7208 DKIM RFC 6376 DMARC RFC 9989

Does a successful Add DKIM response finish the job?

No. Publish the record, confirm activation and inspect a received message.

Oracle B2C Service OCI Mail e-Domains Oracle B2C Service Add DKIM for a Domain SPF RFC 7208 DKIM RFC 6376 DMARC RFC 9989

Must inbound MX routing change?

Not merely to publish outbound authentication records. Any mail-routing change needs its own approved plan.

Oracle B2C Service OCI Mail e-Domains Oracle B2C Service Add DKIM for a Domain SPF RFC 7208 DKIM RFC 6376 DMARC RFC 9989

What keeps original scope acceptance pending?

The unresolved RightNow deployment boundary, tenant records, sender approval, SPF prescription and live receiver evidence.

Oracle B2C Service OCI Mail e-Domains Oracle B2C Service Add DKIM for a Domain SPF RFC 7208 DKIM RFC 6376 DMARC RFC 9989

[ Sources ]

Sources

  1. Oracle B2C Service OCI Mail e-Domains

    Sections e-Domains managed objects4–8

  2. Oracle B2C Service Add DKIM for a Domain

    Sections Steps2–11

  3. SPF RFC 7208

    Sections §3.2; 3.3; 4.6.4

  4. DKIM RFC 6376

    Sections §3.5; 3.6.2; 6.1

  5. DMARC RFC 9989

    Sections §4.4; 4.7; 4.10; 5; Appendix A.6 removal of pct

[ Glossary ]

Glossary

SPF
A mechanism for evaluating whether a connecting sender is authorized for an SMTP identity.
DKIM
A cryptographic message signature associated with a signing domain and selector.
DMARC alignment
The relationship required between an authenticated SPF or DKIM domain and the visible From domain.
e-Domains
The documented B2C Service Configuration Assistant surface for OCI Mail domain, DKIM and sender administration.

Enterprise provenance

Why top financial institutions and governments retired their email security dashboards.

Traditional email authentication platforms sell you a dashboard and ask your engineers to do the labour. In high-stakes environments, manual oversight means delayed enforcement, configuration drift and unmonitored shadow domains.

EmailAuth is the agentic email provenance platform. Our agents enforce p=reject, keep third-party senders aligned and move your domains to full RFC 9989 compliance, the new DMARC standard,, with human-in-the-loop auditability.

Governments Large enterprises Tier-1 financial institutions

SaaS · Dedicated tenancy · Air-gapped on-prem · BYOK encryption

Knowledge Base