Loading
Salesforce Enforces New Security Requirements in Summer 2026Read More
Unified Messaging
Table of Contents
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

          Search all of Salesforce Help
          Authorized Email Domains

          Authorized Email Domains

          Authorized email domains determine which domains Marketing Cloud Next can use for dynamic reply and carbon copy (CC) addresses. After you register and verify a domain in Unified Messaging, you can use any email address on that domain as a reply or CC address.

          Required Editions

          Available in: Lightning Experience
          Available in: Salesforce Enterprise and Unlimited Editions with Marketing Cloud Next Growth Edition or Advanced Edition
          Not supported in Government Cloud Plus
          Note
          Note Authorized email domains are separate from authenticated domains. Authenticated domains control how Marketing Cloud Next sends email, while authorized email domains control which domains are used for dynamic reply and CC addresses.

          Authorized email domains act as an allowlist that restricts dynamic reply routing to domains your organization owns and controls. Without domain authorization, a merge field expression can resolve to an arbitrary external email address and route replies outside your organization.

          How Authorized Email Domains Work

          When you authorize and verify a domain, Marketing Cloud Next can use any email address on that domain as a dynamic reply or CC address. You don't register individual sender addresses, which simplifies administration for organizations with many senders. For example, after you authorize and verify abc.com, Marketing Cloud Next can use any @abc.com address as a reply address.

          The domain used for replies doesn't need to match your sending subdomain. For example, your Authenticated Domain can be mail.abc.com, while your authorized email domain is abc.com.

          Considerations

          • Configure an authorized email domain when marketers want to use a dynamic reply address in a Send Email Message activity or enable Dynamic Reply for the first time. Marketing Cloud Next shows a notification in the Send Email Message activity until you verify at least one authorized email domain.
          • If your organization uses only the Reply Mail Management (RMM) address, you don't need to configure an authorized email domain. RMM generates a system-managed reply address and doesn't rely on dynamic reply routing.
          • You can configure authorized email domains from either Salesforce Setup or Unified Messaging. A domain that you add in either location appears in both, so you don't configure the same domain twice.
          • Add and Verify an Authorized Email Domain
            Before marketing specialists can configure a Dynamic Reply or CC address, you must add and verify at least one domain. Verification confirms domain ownership using a Domain Name System (DNS) TXT record. Marketing Cloud Next confirms only that you own the domain and doesn't check whether the domain can send or receive email. So, you can verify a domain before its mailboxes and mail servers are set up.
           
          Loading
          Salesforce Help | Article