The direct answer
DMARC can pass through aligned SPF or aligned DKIM. That does not remove provider-specific requirements: configure and validate both where required by your sending environment.
What does “aligned” add to a pass?
A passing check using an unrelated service domain does not necessarily authenticate the domain visible in the From address for DMARC. Alignment is the relationship between those identities.
Inspect received headers from each actual sending service. Avoid inferring success only from the presence of SPF and DKIM records in DNS: records describe configuration, while the message shows how it was used.
What is the practical setup target?
Follow your provider’s current sending requirements and configure the appropriate SPF and DKIM identities. Google’s bulk-sender guidance requires both SPF and DKIM, alongside DMARC requirements; a minimum DMARC pass is not the complete rulebook.
Keep representative message samples in your rollout record. If one platform changes its signing or return-path configuration, those samples help the team identify what changed and repeat a meaningful check.
Sources & further reading
Provider guidance checked on . Requirements can change; check the original guidance when implementing. Planning checklists and examples are BIMI World’s editorial suggestions.