Documentation — Badex Signature

Introduction

Badex Signature is a server-side email signature management platform for Microsoft 365. Unlike traditional solutions, it works at the SMTP level — no Outlook add-ins, no per-user installation, no user training required.

Every outbound email from your organization passes through our SMTP server, which injects the correct signature for each sender and signs the email with DKIM before delivery.

✅

Zero client-side installation.

Works with Outlook, Mac Mail, Thunderbird, iOS Mail, Android — any email client that uses Exchange Online.

Prerequisites

Microsoft 365 tenant with Exchange Online
Global Administrator or Exchange Administrator role
Access to your domain's DNS settings
PowerShell with ExchangeOnlineManagement module

Connect Microsoft 365

Go to Microsoft 365 in your Badex dashboard and click Connect Tenant. You'll be redirected to Microsoft's OAuth consent screen.

Grant the following permissions:

User.Read.All — Read all user profiles
Organization.Read.All — Read organization info
offline_access — Keep the connection alive

After consent, Badex will automatically import all users from your directory.

Add Your Domain

Go to Domains and click New Domain. Enter your email domain (e.g., company.com).

Badex will automatically generate a 2048-bit RSA DKIM key pair for your domain.

Configure DKIM

After adding your domain, click DKIM Setup to see the DNS records you need to add:

# Add these records in your DNS provider (Cloudflare, GoDaddy, etc.)

# DKIM Record
Type: TXT
Name: sig1._domainkey.company.com
Value: v=DKIM1; h=sha256; k=rsa; p=YOUR_PUBLIC_KEY

# SPF Record (add our IP to your existing SPF)
Type: TXT
Name: company.com
Value: v=spf1 include:spf.protection.outlook.com ip4:173.212.249.164 -all

# DMARC Record
Type: TXT
Name: _dmarc.company.com
Value: v=DMARC1; p=none; rua=mailto:[email protected]

Use the Check DNS button in the dashboard to verify all records are propagated correctly.

Create Signature Template

Go to Templates and click New Template. Choose a preset layout or start from scratch using our drag-and-drop editor.

Use these variables in your template — they're replaced automatically per sender:

<?php echo e(full_name); ?> Full name of the sender

<?php echo e(title); ?> Job title

<?php echo e(email); ?> Email address

<?php echo e(phone); ?> Office phone

<?php echo e(mobile); ?> Mobile phone

<?php echo e(department); ?> Department

<?php echo e(company_name); ?> Company name

<?php echo e(website); ?> Company website

Setup Exchange Connector

Go to Microsoft 365 → Connector Script and copy the auto-generated PowerShell script. Run it in Exchange Online PowerShell:

Install-Module ExchangeOnlineManagement -Scope CurrentUser -Force
Import-Module ExchangeOnlineManagement
Connect-ExchangeOnline

# The script will create:
# 1. An outbound connector routing mail through Badex
# 2. A transport rule to avoid signature loops

Test & Go Live

Send a test email from any mailbox in your organization to an external address (e.g., Gmail). Check that:

The signature is appended correctly
DKIM shows as PASS in Gmail's "Show original"
SPF shows as PASS
DMARC shows as PASS

💡 Tip:

Send a test to [email protected] — you'll receive an automatic deliverability report.

Getting Started