Use a Verified Domain for User-Level Email Verification
Simplify user management by verifying email addresses at the domain level with
DomainKeys Identified Mail (DKIM) or an authorized email domain. When you use these options, email
verification isn’t required for users with email addresses on a domain that you own. Before you
implement this option, carefully evaluate the security implications.
Required Editions
User Permissions Needed
To manage DKIM keys, configure email deliverability, or configure authorized email
domains:
Customize Application
To modify authorized email domains:
Email Administration
For example, if you enable this option for example.com,
user-level email verification isn’t required for any email address that ends in
@example.com.
Warning
To protect your brand and
business, require email verification for all active DKIM keys and authorized email
domains.
When you rely solely on domain-level verification, you simplify user management, but you risk
impersonation fraud. Salesforce can send email from any address on your sending domain. Any
user who can create users in Salesforce can also send email from any address on your domain.
For example, that user can create an email address for your public relations team, your sales
team, or even a member of your executive team. Proceed only if you accept these risks.
Verify your sending domains and manage how user-level email
verification is enforced through DKIM keys or authorized email domains.
Determine whether to bypass user-level verification via DKIM keys or authorized email
domains.
The option to bypass user-level email verification via DKIM applies to all domains
with an active DKIM key. With authorized email domains, you can bypass user-level email
verification for individual verified domains. To configure this option for a single domain with
an existing DKIM key, create an authorized email domain record for that domain.
To bypass user-level email verification for a single domain, enable a setting on the
corresponding authorized email domain.
From Setup, in the Quick Find box, enter Authorized Email Domains,
and then select Authorized Email Domains.
Click Edit for the domain.
Disable Require email verification and save your changes.
To bypass user-level email verification for all domains with an active DKIM key, enable an
email deliverability setting.
To review your active DKIM keys, from Setup, enter DKIM Keys in the Quick Find box, and
then select DKIM Keys.
From Setup, in the Quick Find box, enter Deliverability, and then
select Deliverability.
Enable Verify the ownership of email sending domains by DKIM keys
and save your changes.
We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required Cookies
Always Active
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional Cookies
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising Cookies
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.
