Loading

Chatter Email Replies Not Posted Due to Email Authentication Failure (SPF, SenderID, or DomainKeys)

Publish Date: May 11, 2026
Description

When a user replies to a Chatter post via email, the reply may not appear in Chatter. This occurs when the sending email server fails one or more of Salesforce's advanced email authentication checks.
Salesforce verifies the legitimacy of the reply email sender using three authentication protocols:

  • Sender Policy Framework (SPF): An email authentication method that specifies which mail servers are authorized to send email on behalf of a domain. SPF helps prevent email spoofing.
  • SenderID: A Microsoft-developed email authentication standard closely related to SPF, used to validate the sender's identity.
  • DomainKeys (DKIM): A cryptographic email authentication method that uses a digital signature linked to the sending domain to verify that the message was not altered in transit.

If the sending server fails any of these three checks, Salesforce ignores the email reply and it is not posted to Chatter.
Real-life example: A support agent replies to a Chatter post via their corporate email. Their company's email server is missing a valid SPF record. Salesforce's authentication check fails, and the reply is silently dropped — it never appears in Chatter.

Resolution

Chatter email replies are subject to advanced email authentication protocol verification to confirm the sender's legitimacy before the message is processed. The sending server must not fail any of the three protocols (SPF, SenderID, or DomainKeys), and must pass at least one, for the email reply to be processed.
To resolve this issue:

  1. Contact your email administrator and ask them to review the domain's SPF record to ensure it authorizes the sending mail server.
  2. Confirm that DomainKeys/DKIM is properly configured for outbound email from your domain.
  3. Verify that SenderID is not misconfigured in a way that causes a protocol failure.
  4. Test by sending a reply to a Chatter post from the affected account and checking whether it appears in Chatter.
  5. If unsure of your current email authentication configuration, use a free diagnostic tool such as MXToolbox to check your domain's SPF, DKIM, and SenderID records.

Note: If the sending server does not fail any of these protocols and passes at least one, the reply email is processed and posted to Chatter. If it fails a protocol, the email is ignored without notification to the sender.

Knowledge Article Number

000385398

 
Loading
Salesforce Help | Article