Enable Salesforce to Send Email
Before Salesforce can send email on behalf of your users, domain-level and user-level verification is required. Salesforce admins verify the domains that you own, and users verify their email and return email addresses. To help users, admins can identify users with unverified emails and initiate the verification process.
Required Editions
| Available in: Salesforce Classic and Lightining Experience |
| Available in: all editions except Database.com |
| User Permissions Needed | |
|---|---|
| To edit users: | Manage Internal Users |
| To manage DKIM keys, configure email deliverability, or configure authorized email domains: | Customize Application |
| To modify authorized email domains: | Email Administration |
- Requirements to Send Email from Salesforce
To protect your org and brand, Salesforce requires domain-level and user-level email verification. Salesforce can send email on behalf of your users only when both levels of verification are complete. To enable all users with a verified email address to send email from Salesforce, enable a substitute email address for unverified domains. - Considerations for Sending Email from Salesforce
Review the recommended method for verifying your email-sending domains and considerations if you use a single email-sending domain in multiple orgs. Allowlist a Salesforce-owned email domain, and understand why email address verification is important to your security. - Verify Your Email Address and Return Email Address in Salesforce
To send email from Salesforce, verify your email address. And to use a different return email address for email from Salesforce, verify that email address, too. - Verify Your Email-Sending Domains
To send email from Salesforce on domains that you own, verify domain ownership with DomainKeys Identified Mail (DKIM) or authorized email domains. For example, if your users’ email addresses are in the formatname@example.com, verify that you ownexample.com. - Check the Verification Status of an Email-Sending Domain
Salesforce requires both domain-level and user-level verification to send email. View the verification status of a domain that you own on the Deliverability Setup page. - Identify Verified Email-Sending Domains
To identify the email-sending domains that require verification, use Salesforce Object Query Language (SOQL) and Tooling API. Query your DomainKeys Identified Mail (DKIM) keys and your authorized email domains. - Send Email for Users with Unverified Domains
Enable Salesforce to send email for users whose email domains you can't verify, such as Experience Cloud site users, Salesforce Sites users, consultants, and users with public email addresses like yahoo.com or icloud.com. With this option, the user's display name and reply-to address remain unchanged, but the From address uses email@UniqueId.sfcustomeremail.com, where UniqueId is your org ID or Experience Cloud site ID. - Manage User Email Address Verification
Users can’t send outgoing email from Salesforce until their Salesforce email address and return email address are verified. This requirement improves security in Salesforce and reduces the risk of email spoofing and spam. Identify users with unverified email addresses or return email addresses. Then learn how to initiate the verification process. - Use a Verified Domain for User-Level Email Verification
Simplify user management by verifying email addresses at the domain level with DomainKeys Identified Mail (DKIM) or an authorized email domain. When you use these options, email verification isn’t required for users with email addresses on a domain that you own. Before you implement this option, carefully evaluate the security implications.
Did this article solve your issue?
Let us know so we can improve!
