Setting up email with Google Workspace


This article provides some tips on using DBA Email with Google Workspace.   These settings and screenshots are subject to change.



Knowledge Base Example

  • We created a Workspace account for the domain @mikeonmanufacturing.com
  • We will set up a SMTP relay service and validate our IP Address
  • We are using the username ([email protected]) and password that is used to sign into Google Workspace.


Prerequisites

  • The server that DBA is installed on must use a Static IP Address.   This will help with your validation procedures.
  • You must setup Google Workspace and link your domain to your account

Recommended Practices

  • Use the SMTP Relay Server option for Gmail
  • Establish SPF and DKIM records for your domain to improve deliverability and security.   Contact your domain provider for specific instructions.



DBA User Email Settings


SMTP Email Client - We will be using the SMTP Relay Server


Reply to Email Address:  This must be in the same domain as your Google Workspace domain


Outgoing Mail Server (SMTP) : smtp-relay.gmail.com


Port:  587


SSL/TLS : This must be selected


Timeout:  leave value at 1


Authentication Required for Output Emails:  This must be selected


User Name:  Email address from the domain linked to your Google Workspace account


Password:  This is the password used to sign into Gmail for this email address.  Be very meticulous with the username and password and double check that you are able to sign into Gmail with those credentials.   The number one failure in the email routine is improper username/password credentials.






Google Workspace Admin Tasks

Step 1: Set up SMTP relay in your Google Admin console


In the Admin console, go to Menu > Apps > Google Workspace > Gmail > Routing, and you can add and edit the SMTP relay service.


  1. Allowed Senders - Select "Only Addresses in my domains". All of the DBA emails that you set up should be for your domain that you have validated for use with Google Workspace. Do not choose the "Anny Addresses" option. We have had reports that the "Any Addresses" option causes validation errors.
  2. Authentication - Select "Require SMTP Authentication".  This options along with TLS Encryption will be used when the program uses the username email and password in Email User Setup.   You can optionally also select the "Only accept mail from the specified IP addresses if you have registered the static IP address of your Server where DBA resides.
  3. Encryption - Select the Require TLS encryption. You will also be checking the box in your User Email Settings in DBA for TLS encryption.



Step Two - Add IP Address to Allowlists in Gmail


In the Admin console, go to Menu > Apps > Google Workspace > Gmail > Spam, Phishing and Malware you can add the public IP address of the server with DBA installed.   


Gmail Help - Add IP Addresses to Allowlists in Gmail






Step Three - Setup Email Authentication for your Domain (SPF and DKIM)


It is important to set up email authentication policies for your domain.   Sender Policy Framework (SPF) is an email authentication that allows you to list all of the IP Addresses that are authoroized to send email on behalf of your domain.  DomainKeys Indentified Mail (DKIM) is an authentication method that uses encryption to sign and verify your emails.   Both methods will require TXT entries against your DNS.       Follow your domain provider's instructions for setting up authentication.


Gmail Help - Setup Email Authentication for your Domain