Skip to main content

Return to TX Community

Liaison

Ensuring Salesforce Emails Send from Your Domain

Recent Salesforce updates may block emails sent from unverified or default addresses or domains (such as @targetx.com). This guide shows you where to review and update your settings, so emails are sent successfully from your institution’s domain.

Before you begin

  • Ensure you’re using an email from your institution’s domain (e.g., @yourschool.edu)
  • Avoid default @targetx.com addresses
  • We recommend using a shared, role-based email address (for example, admissions@yourschool.edu) rather than an individual staff member’s account.

Step 1: Verify Organization-wide Email Addresses

These are the approved “From” addresses Salesforce can use.

  1. Navigate to Setup and search for Organization-Wide Addresses.
  2. Confirm you have emails with your domain listed.
  3. Add a new email address if needed:
    1. Click Add.
    2. Enter email address.
    3. A verification link will be sent to this email inbox from Salesforce. Verify the address using this link.
    4. Confirm status shows Verified in your Salesforce org.

Email Verification Steps_Step 1 Org wide email

Step 2: Update Process Automation Settings

Automation (such as Salesforce Flow) relies on these defaults.

  1. Navigate to Setup and search for Process Automation Settings.
  2. Update the following locations:
    1. Default Workflow User 
    2. Automated Process User Email Address 

Email Verification Steps_Step 2 Process Automation Settings

Step 3: Check Digital Experience (Community) Emails

This controls emails sent from portals (application site, appointment scheduler site, etc.). You will need to confirm this for each site.

  1. Navigate to Setup and search for All Sites.
    Email Verification Steps_Step 3 Check Digital Experience Emails
  2. Select your SiteWorkspaceAdministrationEmails
  3. Confirm the following:
    1. Email address uses your domain
    2. Email address exists in Organization-Wide Addresses
    3. Status is Verified
    4. Click Verify if needed
      Email Verification Steps_Step 3 Community Administration Emails

Step 4: Update Site (Guest User) Email Address

This setting routes emails sent by Site (Guest) users through a verified address, ensuring those messages are not blocked and delivered reliably.

  1. Navigate to Setup and search for Sites.
  2. Select your site (e.g., Event Site).
  3. Click Public Access Settings.
  4. Open the Guest User.
  5. Confirm the following:
    1. Email address uses your domain
    2. Email address exists in Organization-Wide Addresses

Email Verification Steps_Step 4 Update Site Guest User email

Step 5: Review Additional Email Settings

Check these commonly overlooked areas:

Recommendation Request Forms

  1. Ensure sender email is a verified org-wide address using a domain that has been configured using DKIM or Authorized Email Domains.

EmailVerify_6RecRequest v2.jpg

Event Settings

  1. Confirm Default Email Sender uses a verified email.
  2. If using a custom sender, it must also be verified.

Email Verification Steps_Step 5 Event Settings

Email Sender on Organization Events

  1. If specified, the Email Sender on Organization Events should use a verified email:

TargetX_EmailVerify_OrgEvent EmailSender.jpg

Email Alerts

  1. The From Email Address for Email Alerts must be a verified email:

TargetX_EmailVerify_Email Alerts.jpg

Scheduled Report and Dashboard Subscriptions

  1. Emails send from the user who scheduled them
  2. That user’s email must:
    1. Be in Organization-Wide Addresses
    2. Be verified

EmailVerify_6Subscriptions.jpg

Step 6: Review Flows Sending Emails

If you use Flows with email actions:

  1. Check each Flow’s From Address
  2. Ensure it uses a verified Organization-Wide Email

Step 7:Identify and Restart Scheduled Apex Jobs for DKIM Compliance

Scheduled Apex jobs must be restarted under a DKIM‑covered user to ensure outbound emails are properly authenticated and successfully delivered. Apex scheduled jobs that send outbound emails must run under a user whose email domain is included in the Salesforce DKIM configuration, as Salesforce applies DKIM signing based on the running user’s email domain and the “From” address. If a job is created or scheduled by a user with a non‑DKIM‑enabled domain, the resulting emails (e.g., Schedule Job reports, failures, or reminders) may fail DKIM/DMARC checks and be rejected, quarantined, or filtered as spam by recipient mail servers.

Identify Scheduled Apex Jobs

  1. Navigate to Setup.
  2. Search for and select Scheduled Jobs.

Review the Running (Submitting) User

  1. Review the Submitted By column.
  2. Click the Submitted By user name.
  3. Confirm the user’s Email Address domain.

Stop the Existing Scheduled Job

  1. Select Manage next to the affected job.
  2. Note what Apex Class is running. You will need this for the next step. 
  3. Select Delete and confirm the deletion.

Restart the Apex Job Under the Approved Email Domain User

  1. Click the button Schedule Apex to restart the job.
  2. Give the job a name (it can be the same as the old job name).
  3. Paste the name of the Apex Class from the prior step.
  4. Set your schedule (e.g., Sunday Weekly and a Start and End Date). 
  5. Click Save.

Typical, Scheduled Apex jobs for TargetX Clients include but are not limited to: Communication Planner Report Validator, Communication Planner Campaign Sync Retry, Communication Planner Auto Deactivate Campaigns and Tracks, Clean Up TargetX Logs, Email Broadcast Member Cleanup, etc.

Step 8: Configure Email Authentication (DKIM or Domains)

Confirm that Salesforce is authorized to send emails from your domain. This must be configured in production and reconfigured in the sandbox after every refresh. TargetX recommends that you satisfy this requirement via DKIM keys. You may also do so via Authorized Email Domains.

DKIM Key Configuration

  1. Navigate to Setup and search for DKIM Keys.
  2. Confirm your domain is listed (e.g., yourschool.edu)
  3. If missing, add and configure it in production

Email Verification Steps_Step 7 DKIM Key Config

Authorized Email Domain Configuration

  1. Navigate to Setup and search for Authorized Email Domains.
  2. Select Authorized Email Domains.
  3. Click Add.
  4. Enter the domain name (for example, example.com).
  5. Click Save.
  6. Copy the verification key Salesforce generates (example: 00D000000000P18=1AB00000000000B).
  7. In your DNS provider, add a TXT record for the domain.
  8. Use the domain name with or without the _sfdv. prefix (for example, _sfdv.example.com or example.com).
  9. Paste the Salesforce verification key/value into the TXT record value field.

For additional information, see the Salesforce Help & Training article Salesforce Email Domain Verification Enforcement Overview.

Need Help?

If emails are still not sending after these updates, contact support or submit a case with details about where the email is triggered.

 

  • Was this article helpful?