After setting up a verified domain under the JIRA Organization (verified all SPF and DKIM settings are correct). We changed the JIRA project to send as our company domain. However, emails coming out of JIRA fail DMARC authentication due to bad DKIM authentication by Atlassian. The DKIM is verified against the atlassian domain and not our company domain. So the DKIM is not aligned and DMARC fails the message so it ends up in Spam or totally rejected.
Headers from email show DKIM is checked against d=atlassian.net and d=sendgrid.info, but nothing about d=mycompanydomain:
dmarc=fail (p=QUARANTINE sp=QUARANTINE dis=QUARANTINE) header.from=mycompanydomain.com
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=atlassian.net;
h=from:to:in-reply-to:references:subject:mime-version:content-type;
s=s1; bh=4uWfLAkrLO3ENH35Y0WCPV8TY1I=; b=uYVXlxSnslXMbVQWA1Z732k
2ihnhYFrCfVJJLq+v4Ed90xoWVAjuavFm4GFKNvb1WzIMb71rDlKRB4y8sOAC2hi
9Zy2KM5MdsHKTStUoF1C1MmcbqtBFA2fX17ocCZrkfkVPFEUKK7/F41YvX6SKcso
wqDnsnAtVfKK1R06LIPg=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=sendgrid.info;
h=from:to:in-reply-to:references:subject:mime-version:content-type:x-feedback-id;
s=smtpapi; bh=4uWfLAkrLO3ENH35Y0WCPV8TY1I=; b=GbFkHl8qMdSX4JAy8v
y5lyr8bvUVuZvy/l38TZhVtsDdBLxJWH6BL14J3o/pVNkHIrPNxFuSI4jCXmZp8J
sOYXltDFIlrcvGgRmasL9RWCqroRdWbRAO1SY9pwwo/8NC/JZazq8QZR1xR9rXUq
QYDYKLxHy6I7MZC6elcIm/rPU=
R
seems like there is a known issue regarding this https://jira.atlassian.com/browse/JRACLOUD-40169
but for us if this keeps failing then we can't deploy the solution. Has anyone been able to work with Atlassian support to get DKIM to authenticate properly and ultimately pass DMARC.
thx