DKIM. The dashboard generates the keys; you just publish CNAMEs. Add s1._domainkey.yourdomain.com → s1._domainkey.
SPF. Add include:inbox.onesourcesoft.com to your existing SPF record. If you have no SPF record yet, publish v=spf1 include:inbox.onesourcesoft.com -all on your root domain.
DMARC. Start with p=none for monitoring: v=DMARC1; p=none; rua=mailto:dmarc-reports@yourdomain.com. After 30 days of clean reports, move to p=quarantine. After another 30, to p=reject.
Run the dashboard's Verify button after publishing each record. Verification typically takes 5 minutes to propagate.
