Set up Apple's private email relay

To provide users with greater privacy, sign in with Apple includes a privacy feature “Hide My Email” for users who prefer to hide their email address. This means Identity (and thereby any application that uses Identity for sign-in) will receive an obfuscated email in the format xxxxxx@privaterelay.appleid.com instead of their original email ID.

To ensure that emails are correctly routed to the user using the Apple Private Email Relay Service, configuration changes must be made in the email domain’s DNS entries and in the Trimble Apple developer console.

To deliver emails to private address:

1. Identify the email address communications that will be sent from and the server/service which is used for sending emails.

2. A TXT record needs to be added to the DNS entries for the domain from which the emails will be sent. The content of that record depends on how emails are sent. The format of this record follows the SPF specification (https://tools.ietf.org/html/rfc7208) Example:

   v=spf1 ip4:155.60.0.0/16 ~all

   or

   v=spf1 include:sendgrid.net ~all

3. If more than one server/service is used to send emails from a given domain there can be multiple entries in the TXT record. For example, v=spf1 ip4:155.60.0.0/16 include:sendgrid.net include:mktomail.com ~all

4. Once the SPF record is created the domain needs to be registered with the Apple Private Email Relay in Trimble’s Apple Developer Account .

After this setup is complete, customers who elect to hide their email address will receive forwarded communications to the obfuscated email address.