The SendGrid integration allows you to send email authentication notifications using your own SendGrid account instead of SendAuth’s default email provider.

Prerequisites

• Active SendGrid account
• SendGrid API key with mail send permissions
• Verified sender email address in SendGrid

Configuration

SendGrid configuration is limited to users with the admin role.

Navigate to Settings → SendGrid

Required Fields

Enable SendGrid Integration

• Check this box to activate SendGrid for your organization

API Key

• Your SendGrid API key
• Create at: https://app.sendgrid.com/settings/api_keys
• Required permission: Mail Send

From Email

• Email address to send from
• Must be verified in your SendGrid account
• Example: noreply@yourcompany.com

From Name

• Display name for the sender
• Example: YourCompany Security or IT Department

Email Template

Customize the email message template at Settings → Templates → Email Template.

Available Variables

• {{LINK}} - Authentication link (required)
• {{REQUESTOR}} - Who made the request
• {{MESSAGE}} - Custom message from requestor

Example Template

Hello,

{{REQUESTOR}} is requesting authentication via SendAuth.

{{MESSAGE}}

Click here to authenticate: {{LINK}}

This link expires in 5 minutes.

Best regards,
Your Security Team

Sender Verification

Before using SendGrid, verify your sender email address:

1. Log in to SendGrid Console
2. Navigate to Settings → Sender Authentication
3. Verify either:
   • Single Sender Verification - For individual email addresses
   • Domain Authentication - For all emails from your domain

Emails will not send until sender verification is complete.

Message Delivery

When a user with email enabled in their messaging preferences receives an authentication request:

1. SendAuth formats the message using your template
2. Email is sent via SendGrid from your configured sender
3. User clicks the link to authenticate
4. Transaction updates in real-time

Deliverability

For best deliverability:

• Use domain authentication instead of single sender verification
• Set up DKIM and SPF records
• Monitor SendGrid reputation
• Keep bounce rates low
• Use a recognizable from name and email

Status Monitoring

The integration status indicator shows:

• Success - Last email was accepted by SendGrid
• Error - Recent delivery failure with error details
• Not yet invoked - Integration configured but not yet used

Troubleshooting

Emails not sending

• Verify API key has Mail Send permission
• Check sender email is verified in SendGrid
• Ensure SendGrid account is in good standing
• Review SendGrid activity feed for errors

Emails going to spam

• Complete domain authentication
• Set up SPF and DKIM records
• Use a professional from address
• Avoid spam trigger words in templates
• Check sender reputation in SendGrid

Invalid API key error

• Regenerate API key in SendGrid Console
• Ensure key has Mail Send permission
• Update key in SendAuth settings
• Verify no extra spaces when pasting

Sender verification required error

• Verify sender email in SendGrid Console
• Wait for verification email and click link
• Or set up domain authentication
• Update from email in SendAuth after verification

Pricing

• Emails are billed directly by SendGrid to your account
• SendAuth does not charge additional fees for custom SendGrid
• Review SendGrid pricing at https://sendgrid.com/pricing

Security Best Practices

• Create dedicated API key for SendAuth
• Use least-privilege permissions (Mail Send only)
• Rotate API keys regularly
• Monitor SendGrid activity for unusual patterns
• Enable two-factor authentication on SendGrid account

Disabling SendGrid

To stop using custom SendGrid and return to SendAuth’s default email:

1. Navigate to Settings → SendGrid
2. Uncheck Enable SendGrid Integration
3. Click Save

SendAuth will immediately switch back to the default email provider for all future messages.