Regarding Spring '26 "Authorized Email Domains" security enhancements., Salesforce indicates exceptions for gmail.com and outlook.com domains. My University runs our email on Outlook servers, but our domain name is that of the University. Does the exception by Salesforce apply to Outlook servers regardless of domain name, or only for outlook.com
as the domain?
Thank you!
Great question regarding the Spring '26 Authorized Email Domains security enhancement. Here's the clarification:
The exception is domain-specific, not server-based.
Salesforce's exceptions for gmail.com and outlook.com apply to those specific domains, not to all mail servers that happen to use the underlying infrastructure. This means:
1. If your university email is sent through servers hosted on Microsoft 365 (Exchange Online) but the sender domain is youruniversity.edu, that does NOT automatically qualify under the outlook.com
exception.
2. The exception applies only when the sender's email address domain is literally
outlook.com, hotmail.com, or other Microsoft consumer email domains — not institutional domains using Microsoft infrastructure.What this means for your University:
Your university's email domain (e.g.,
unc.edu) will need to be explicitly added to the Authorized Email Domains list in Salesforce Setup to avoid disruption after the Spring '26 enforcement date.Action required:
1. Go to Setup [right arrow] Email [right arrow] Authorized Email Domains (or "Organization-Wide Email Addresses" depending on release).
2. Add your university's email domain(s) to the authorized list.
3. Review the full release notes at the link you referenced to confirm the exact enforcement date and any additional exceptions.
If you're unsure whether your domain qualifies, contacting Salesforce Support to confirm is the safest approach.
