Topics Map > Security
Topics Map > Microsoft 365 > Email
Email Authenticity (DMARC) at UWM
University email administrators have deployed the Domain-based Message Authentication, Reporting & Conformance (DMARC) framework to provide email services with stronger control to prevent illegitimate use of UWM email addresses and ensure message delivery to recipients.
We frequently use the term email authenticity in place of DMARC because it is more descriptive of what we are evaluating when we receive an email message.
How DMARC Works
- DMARC provides protection against spam and phishing emails and other spoofing attempts by verifying the authenticity of any sender attempting to use the @uwm.edu domain or sub domains.
- When unauthenticated messages are detected, DMARC provides instructions on how to handle unauthorized email, such as delivering messages to junk, quarantining, or rejecting the messages.
- DMARC identifies legitimate senders, either emails sent by UWM Microsoft 365 users or by approved/verified email services and delivers them successfully.
Please see our DMARC Information for a technical, deep dive.
How will DMARC implementation affect you?
Most email users will notice no change in service. If you are a service owner of an on-campus or cloud-based service that sends email, University IT Services staff will engage with you on this project.
If you have procured a new third-party service that sends email, you can also submit the Email Service Configuration request form and IT staff will contact you.
Examples of Approved/Verified Services vs. Unapproved/Unverified Services
| Approved, Verified, and Configured | Unapproved, Unverified, and Not Configured |
| Microsoft 365 Services | Non-UWM email accounts that send as a uwm.edu address |
| pantherLIST | Third-party email services that are not configured to work with DMARC controls |
| Emma | Third-party email scripts/servers that don’t send email using on-campus mail services |
| Qualtrics | |
| SMTP Relay | |
| Other third-party services that are configured to work with DMARC and send using a subdomain |

