Organization-Wide Email Addresses (OWA) are now required to be verified before sending Case emails with custom content. This security enhancement prevents unauthorized use of the <noreply@salesforce.com> address and protects against potential phishing attempts.
Where: This change applies to all Salesforce editions that support Case email functionality.
Why: This security update ensures that all customers configure and verify their Organization-Wide Email Address before sending Case emails containing custom content. Previously, some organizations could bypass this requirement, creating a security risk where unauthorized users could potentially send malicious emails using the trusted @salesforce.com domain. This enhancement closes that security gap by enforcing verification requirements across all organizations.
How: If you've already configured and verified your Organization-Wide Email Address, no action is needed. If you haven't set up your Organization-Wide Email Address or if your current setup wasn't previously enforced, you must configure a verified Organization-Wide Email Address before sending emails with custom content. For setup instructions, see Set Up Organization-Wide Email Addresses in Salesforce Help.