Platform Recovery

Salesforce Marketing Cloud IP Reputation: SAP, Warmup and Throttling

A technical guide to managing Salesforce Marketing Cloud IP reputation through SAP configuration, strategic IP warming, and bounce management.

  • Salesforce Marketing Cloud IP warmup
  • SFMC SAP configuration
  • SFMC IP reputation
  • Marketing Cloud deliverability
  • email throttling SFMC

Managing email deliverability within Salesforce Marketing Cloud (SFMC) requires a deep understanding of how the platform handles IP reputation. Unlike smaller ESPs that often rely on shared pools with high internal regulation, SFMC frequently involves dedicated IP addresses assigned through the Sender Authentication Package (SAP). This puts the burden of reputation management directly on the sender. If you do not proactively manage your IP warm-up and monitoring, even the most sophisticated campaigns will fail to reach the inbox.

The Role of the Sender Authentication Package (SAP)

The Sender Authentication Package is not just a branding tool; it is the foundation of your technical reputation. When you purchase SAP, Salesforce provides a collection of features including a Private Domain, Account Branding, and most importantly, a Dedicated IP address. This IP starts with a neutral reputation, meaning it has no history with major ISPs like Google, Microsoft, or Yahoo.

Because this IP is dedicated to your account, its reputation is entirely dependent on your sending habits. If you send high volumes of unengaged or purchased data, your IP will quickly be flagged. Conversely, if you maintain clean data, the dedicated IP ensures that your deliverability is not impacted by the poor practices of other SFMC clients. SAP also configures your DKIM, SPF, and DMARC settings, which are essential for passing modern authentication checks.

Understanding the IP Warmup Process

IP warming is the intentional process of gradually increasing the volume of mail sent from a new IP address over several weeks. The goal is to build a baseline of "normal" traffic that ISPs can analyze. A sudden burst of one million emails from an unknown IP is a primary indicator of spam. By starting small, you allow ISPs to observe low bounce rates and high engagement levels.

The Warmup Schedule

Most SFMC consultants recommend a warmup schedule that doubles in volume every few days or weekly. You should start by sending to your most engaged subscribers first, those who have opened or clicked an email within the last 30 to 60 days. Their positive interaction signals to ISPs that your mail is wanted.

Week 1
Limit sends to roughly 50,000 per day for the largest providers.
Week 2
Increase to 100,000 per day.
Week 3
Target 200,000 per day.
Week 4 and beyond
Continue scaling until you reach your peak daily volume.

If at any point you see a spike in soft bounces or "421" deferral errors, you must pause the increase and maintain the current volume until the errors subside.

Throttling occurs when an ISP limits the number of connections or messages it will accept from your IP within a specific timeframe. In Salesforce Marketing Cloud, this often manifests as "Deferred" status in your tracking extracts. Throttling is not an outright block, but a signal that the ISP is cautious about your sudden volume.

To manage throttling, you can utilize the IP Warm Up account settings or work with your account executive to adjust the delivery rate. However, the most effective way to handle throttling is through list segmentation. By breaking large sends into smaller batches distributed over several hours, you avoid hitting the hourly rate limits imposed by providers like Microsoft Outlook. Using a platform like SenderSignal allows you to monitor these placement trends in real-time, helping you decide if you need to slow down your warmup or if you are clear to proceed to the next volume tier.

Data Hygiene and Bounce Management

SFMC has a built-in Bounce Mail Management (BMM) system, but it is not infallible. A single high-volume send to a list with a 10% hard bounce rate can ruin a new IP's reputation for weeks. Before you even begin the SAP warmup, you should run your lists through a verification service to remove invalid addresses.

Within SFMC, pay close attention to the Bounce Data View. Distinguish between hard bounces (permanent failures) and soft bounces (temporary issues). While SFMC automatically excludes hard bounces after one failure and soft bounces after three, you should be more aggressive during a warmup. If a subscriber soft bounces twice during the first two weeks of a warmup, it is often safer to exclude them from the remainder of the warmup phase to protect the nascent IP reputation.

Shared IPs vs. Dedicated IPs in SFMC

While SAP typically includes a dedicated IP, smaller senders (those sending fewer than 250,000 messages per month) may be better off on a Shared IP pool. Maintaining a reputation on a dedicated IP requires consistent volume. If you only send one large blast a month and remain silent for the other 29 days, your IP reputation will "cool off," and you may face deliverability issues every time you hit the send button.

ISPs look for a consistent pattern. If your volume is sporadic, the SFMC shared pool allows you to benefit from the constant traffic generated by other senders, which keeps the IP "hot" in the eyes of the ISPs. However, you lose control over your destiny; if another sender on that shared pool triggers a blacklist, your mail may also be delayed.

Monitoring Tools and Feedback Loops

You cannot manage what you do not measure. Salesforce Marketing Cloud provides standard reports, but they often lack the granular detail needed to diagnose specific ISP issues. You should ensure your SAP setup includes the registration of Feedback Loops (FBL) with all major providers. This ensures that when a user marks your email as spam, the data is fed back into SFMC to automatically unsubscribe them.

In addition to internal metrics, external monitoring is crucial. Tools like SenderSignal provide an outside-in view of how your IP is perceived, checking against blacklists and monitoring for blocklistings that SFMC’s internal dashboards might miss. By combining SFMC's internal tracking with external deliverability monitoring, you can proactively spot reputation dips before they result in a total inbox blackout.

Checklist for SFMC Reputation Success

To ensure your Salesforce Marketing Cloud instance maintains a high reputation, follow this operational checklist:

Verify SAP Configuration
Confirm that your Private Domain is fully delegated and that SPF and DKIM pass for all send classifications.
Start with Engaged Segments
Never lead a warmup with old or lapsed data. Use your 30-day openers to build the initial trust.
Monitor Deferrals Daily
Check your daily bounce reports for 421 or 451 error codes, which indicate throttling.
Maintain Consistent Volume
Avoid "spike sending." If you have a massive holiday send, start ramping up your daily volume at least two weeks in advance.
Set Up DMARC
Implement a DMARC policy (starting with p=none) to gain visibility into who is sending mail on behalf of your domain.
Audit Automated Journeys
Transactional journeys often have high engagement. Use these to help "float" the reputation of your marketing IP if you are using a single IP for all traffic.

IP reputation in Salesforce Marketing Cloud is a long-term asset. While the technical setup of SAP is a one-time event, the maintenance of the IP through proper warmup and volume management is an ongoing process. By respecting ISP limits and focusing on subscriber engagement, you can ensure your SFMC platform delivers the ROI you expect.

Frequently asked

Questions about this topic

How long does a Salesforce Marketing Cloud IP warmup take?
A standard IP warmup typically takes 4 to 8 weeks depending on your list size and sending frequency. It requires a gradual doubling of daily volume starting from a low baseline, such as 50,000 emails per day for top-tier providers.
What is the difference between a Private Domain and SAP in SFMC?
The Sender Authentication Package (SAP) is a branding suite that includes a dedicated IP, private domain, and RMM configuration. A Private Domain is simply an authenticated domain for sending that does not necessarily include the dedicated IP or full branding features of SAP.
Why is my SFMC email being throttled by Gmail or Outlook?
Throttling usually occurs when a new IP lacks a historical reputation or when there is a sudden spike in volume that triggers spam filters. Monitoring tools like SenderSignal can help you identify if these delays are due to temporary blocks or underlying IP reputation issues.

More on platform recovery

Related Platform Recovery guides that build on this one.

Related reading across SenderSignal

Guides from other disciplines that connect to this topic.

Start free in two minutes

See where your email actually lands.

Placement testing, blacklist monitoring and reputation tracking in one workspace.