If you're not paying for Marketo's branded sender add-on, you don't need to add anything to your SPF.
You incorrectly added an a: mechanism instead of include:, but again, you likely don't need to add anything and can easily break your record by including Marketo's. See my posts at http://blog.teknkl.com/tag/spf
Thanks so much for your response, it is really appreciated.
We are launch pack customers and Marketo sent us the setup steps including IT protocol. I have been working through this list assuming all tasks are to be completed. It is frustrating that the SPF task isn't relevant to us and could have caused issues. I have now requested this be removed from SPF record.
For companies that have not paid for sender add-on does the SPF status always show 'pending configuration'?
Am I correct in thinking that the DKIM task is ok to leave as that is showing as verified in Marketo.
Your record is well under the DNS lookup limit (for now) so you can safely add include:mktomail.com if you want to pass the "pending configuration." You may want to remove it later for completeness and so it doesn't interfere with any later additions.
The DKIM is good... leave that alone.
Thank you again.
You have really helped me.
All the best.