---
schema_version: "1"
id: 8a4486aafbc5edbce31b60e60bc992e67cf0c8e386ca2586103fcb62061d0968
title: Licenses and Considerations for a Sender Authentication Package and Private Domain
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/mktg/264-0-0/considerations_sap_and_private_domain.md
canonical_url: https://help.salesforce.com/s/articleView?id=mktg.considerations_sap_and_private_domain.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 43dbb5a8600b3ab41f0538bef85088a10a27ad17bce45449b7b743dcaa6d4391
description: If you try to brand domains and URLs and find that some options are turned off, some Sender Authentication Package (SAP), Private Domain, or SSL certificate licenses are missing. Contact your Salesforce account executive or Salesforce Customer Support for assistance.
products:
  - Marketing
  - Marketing Cloud Engagement
release: "264"
---
# Licenses and Considerations for a Sender Authentication Package and Private Domain

If you try to brand domains and URLs and find that some options are turned off, some Sender Authentication Package (SAP), Private Domain, or SSL certificate licenses are missing. Contact your Salesforce account executive or Salesforce Customer Support for assistance.

Review this list to identify why an option is disabled.

- **New Domain**: No SAP or Private Domain licenses are available.
- **New dedicated IP**: No SAP licenses are available. This option applies to only the email authentication and URL branding use case.
- **Email authentication and URL branding**: Four or fewer SSL certificate licenses are available, or you already have one domain set up for branding for the member ID (MID). SAP domains require 4 SSL certificate licenses. Each business unit can have only one branded domain.

For help with these scenarios, contact Salesforce Customer Support or your account executive.

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
      <colgroup>
        <col style="width:50%">
        <col style="width:50%">
      </colgroup>
      <thead class="slds-text-title_caps ">
        <tr class="">
          <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d67464e60">Scenario</th>
          <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d67464e63">Details</th>
        </tr>
      </thead>
      <tbody>
        <tr class="">
          <td data-label="Scenario" class="slds-cell-wrap" style="vertical-align:top;" headers="d67464e60 ">Change the configuration of an existing domain.</td>

          <td data-label="Details" class="slds-cell-wrap" style="vertical-align:top;" headers="d67464e63 ">
            <p style="margin-bottom:0;">From the user interface, you can’t change the domain name, branded URL, or DNS
              configuration or delegation. This scenario requires you to procure and configure a
              new SAP or private domain.</p>
          </td>

        </tr>
        <tr class="">
          <td data-label="Scenario" class="slds-cell-wrap" style="vertical-align:top;" headers="d67464e60 ">Configure an additional dedicated IP address.</td>

          <td data-label="Details" class="slds-cell-wrap" style="vertical-align:top;" headers="d67464e63 ">
            <p>With the email authentication and branded URL option in SAP, you can configure a
              new dedicated IP address for the new sending domain. However, you can’t configure an
              additional dedicated IP address for email sending on that domain from the user
              interface.</p>
            <p style="margin-bottom:0;">For the email authentication only option enabled by the standalone Private Domain
              license, you can use a Salesforce shared IP or your current IP configuration. You
              can’t configure a new dedicated IP address for email sending.</p>
          </td>

        </tr>
      </tbody>
    </table>