Order of operations
1) Add sending domain in portal workflows
2) Publish SPF including Layer 9 senders
3) Enable DKIM
4) Add a DMARC policy starting on monitor (p=none) if you are new to DMARC.
FAQ
Can I skip DKIM?
You can, but you should not — DKIM strongly improves trust and DMARC alignment.