Salesforce Email Security Update – What You Need to Know

We've received several enquiries about this update, so we'd like to clarify what it means and whether any action is required.

What is changing?

Salesforce is strengthening email security by preventing emails sent from Salesforce from unauthorised domains.

This change is designed to improve email deliverability and reduce the risk of spoofing and spam.

How could this affect your Salesforce organisation?

Some common scenarios that may be impacted include:

• Automated emails generated from approval processes or workflows
• Task assignment notifications
• Test emails sent by volunteers or consultants working within your Salesforce environment

Salesforce will now use a substitute sender address for certain unverified email scenarios, provided the appropriate setting is enabled.

What should you do?

We recommend reviewing the following areas in your Salesforce org:

• Email Deliverability Settings
  • Ensure the Salesforce substitute email setting is enabled.
  • Review any automated processes that send emails.
• Domain Verification
  • Confirm that your Salesforce has either:
    • DKIM configured, or
    • An Authorised Email Domain verified.
  • Salesforce only requires one of these methods, although some organisations choose to implement both.
• Organisation-Wide Email Addresses
  • Where possible, automated emails and approval processes should use verified Organisation-Wide Email Addresses.

Are Blaze Your Trail customers covered?

If Blaze Your Trail is currently providing support for your Salesforce environment, we have been reviewing these changes with affected customers and implementing updates where required.

However, because every Salesforce organisation is configured differently, we encourage all customers to verify their own settings or contact us if they are unsure.

If you have questions about this update or would like assistance reviewing your Salesforce email configuration, please contact the Blaze Your Trail team.