Settings and activity
5 results found
-
485 votes
Hi everyone, we understand how frustrating it is when important emails like invoices are filtered or blocked, and how this affects customer trust and timeliness of engagement with your transactional communications. Thank you for continuing to share examples and highlighting the impact this has on your business.
We’ve made meaningful progress towards enabling email sending from your own domain. While progress is taking longer than we’d like, we can confirm that substantial backend work is underway. This work spans multiple interdependent teams across Xero, and there are still important steps we need to work through before we can release the capability to customers reliably.
As we continue to develop this capability, there are a few questions that would help our product teams ensure we’re solving the majority of our users’ needs in this space, with a reliable and secure solution.
We’d really appreciate your input on the following questions, either…
An error occurred while saving the comment An error occurred while saving the comment 
Mike Baptiste
commented
We also are struggling with this. Our Xero emails rarely reach Yahoo or AOL email accounts. Our client base can skew older so there are SO many who still use AOL, Bellsouth.net/AT&T (Yahoo), Yahoo, etc. We spend so much time following up on unpaid invoices because people never see the emails from Xero. WE have to try and expalin how to add the sender to theri contact list so MAYBE it'll arrive in the future.
Every other system in our stack that we use can send fully DKIM signed emails from our own domain. It's LONG past time for Xero to implement this and SSO.
An error occurred while saving the comment Mike Baptiste
commented
@Adam - yeah I see that now - I read too fast! Sorry about that. Because you're 100% right about the bad actor stuff. We face that phishing threat with our clients from places like Quickbooks, etc with fake invoices and that means post.xero.com is sketchy to some filters. Hopefully we get this feature soon - my cashflow will be much happier
An error occurred while saving the comment Mike Baptiste
commented
Sorry - I misread your post. Thought you were saying bad actors could spoof domains. Now I see the direction you were going and yes - it means they posion the post.xero.com domain making it harder for the rest of us.
Multiple platforms do it this all the time. You verify your ownership of a domain by creating SPF and DKIM records (TXT or CNAME), which are required to ensure proper delivery of the email from Xero's servers. Xero would only start sending emails from sales@acme.com once they saw acme.com's owners updated the DNS file AND that they were correct, so the emails can be properly DKIM signed and verified. This is not some unusual request. Tons of platforms (Shopfiy, Zendesk, Hubspot, and so on) already have this capability. Xero should too.
An error occurred while saving the comment Mike Baptiste
commented
We face constant issues getting invoice emails seen by our clients. This is not a huge undertaking. Most outfits are used to adding SPF/DKIM records for things like Shopify, Zendesk, and other platforms that have supported this for some time. This is the only platform in our stack that forces email from a domain other than ours. We will HAPPILY beta test this if you decide to implement it.
An error occurred while saving the comment Mike Baptiste
commented
This is a HUGE issue for us. AOL and Yahoo constantly block our Xero emails (directly impacting our ability to get paid because clients never see the invoice) All our other systems like Hubspot, Zendesk, etc send using our domain and a specified email address (ar@domain.com etc). We just add the appropriate SPF and DKIM CNAME records and it works great. They ALWAYS get emails from Zendesk. But from Xero? Depends who their email is with. I realize it's easy to say this is an issue with AOL/Yahoo because the Xero emails ARE spf/dkim compliant. But they get blocked anyway and it's the only system we have this issue with.
For people that choose to use Xero to send the email - you should include the bounce error in the notification emails that a Xero email bounced. It's impossible to troubleshoot. It's usually a typo,but we've had a few instances that the email address was 100% correct - but still bounced. We had no idea why.
Mike Baptiste
supported this idea
·
-
724 votes
Thanks for your feedback on Single Sign-On(SSO). We last updated this idea in October 2025, and we’re sorry it’s taken some time for us to provide another. We will do our best to keep you more informed of progress as it continues.
Where SSO is today
We’ve built an SSO capability for accountant and bookkeeper partner practices using OpenID Connect (OIDC). We ran a closed beta with a small group of partners, which is now complete, and those partners are connected. We’re still confirming how and when other accounting and bookkeeping partners can access it. SSO isn’t currently available to businesses or IT providers. We’ll share access details in a future update once they’re confirmed.
What we’re looking at next
We’re exploring what it would take to offer SSO to small businesses. Business needs differ from accountant and bookkeeper partners’, so we’re looking at:
- how a business and its users…
An error occurred while saving the comment Mike Baptiste
commented
This is reaching a ridiculous point. Even some of our smaller products in our stack support Google and M365 SSO. Plus the need to constantly log back in every hour is REALLY a pain for users. SSO would at least make it a little smoother. Even better would be passkeys. This is all standard stuff - you aren't having to reinvent the wheel here.
Mike Baptiste
supported this idea
·
An error occurred while saving the comment Mike Baptiste
commented
As the push towards Passkeys kicks into high gear in 2025, Xero is way behind here. Most small businesses have Google Workspace or Microsoft 365. These are some of the most secure authentication methods because they've been pushing their users towards 2FA and now Passkeys. At the very least there should be native Passkey support, but ideally, SSO/SAML support for the like of Google. Microsoft, Okta, and Duo. This is the only 'major' app in our business stack that still relies on direct password authentication. Everything else is Passkeys or Google SSO Auth.
-
17 votes
An error occurred while saving the comment Mike Baptiste
commented
This is a trivial change - just print to PDF in Landscape mode. As others have noted, the crucial reference info is only a few characters long. Instead we print direct from the browser, which works, but is not as professional looking
Mike Baptiste
supported this idea
·
-
389 votes
Thanks everyone for your feedback on the invoice print option. We know how much our customers value efficient workflows, and appreciate you sharing your thoughts on how the current "Print PDF" button works.
For those of you looking for a smoother printing experience, a helpful workaround is to set your browser to automatically open PDFs in your preferred viewer after downloading. This can save you a few clicks in the process.
In the interest of transparency, a direct print PDF functionality that go through the download step isn't in our development plans.
You can continue to vote on this idea so if our position changes in the future we will update you all, here.
An error occurred while saving the comment Mike Baptiste
commented
This has been an issue from the first time we switched to Xero. It takes SOOOOO long to print an invoice for counter customers - they look at us like 'what are you doing? I already paid!' It's insane how long it takes.
PLEASE add a native browser print button that immediately brings up the browser print dialog. Just about every other commerce/finance site does this.
The best we could do was set the browser to 'Always download PDF' and after downloading a pdf, right click it in the download dropdown and select 'Always Open in (your PDF viewer)' At least this way when we click the Print PDF, it eventually opens in the PDF viewer and we click the print button and then 'OK'. So less clicks, but still a LOT of effort.
Coupled with the multiple seconds it takes to add a payment and get the paid invoice screen, this just adds to the time needed to get a customer on their way.
Mike Baptiste
supported this idea
·
-
102 votes
Hi team, we've just launched passkeys to our first group of users. From this week, Xero Me app users who haven't set up MFA yet will be able to use passkeys to log into Xero. Next, we'll be progressively rolling this out to more users over the coming months. We look forward to and welcome your feedback here. As we have more news on the rollout I'll share with you on this idea.
An error occurred while saving the comment Mike Baptiste
commented
So glad to see this. Having to login multiple times a day, plus the login popup doesn't smoothly integrate with password managers (sometimes it fills, sometimes it doesn). Passkeys are life changing when properly setup because reauthenticating can be as simple as a single click. We would be happy to beta test this! As a MSP, we've setup MANY types of FIDO2 authentication methods (Yubikeys, Google Titan, Windows Hello, 1Password Passkey, etc) to help our client deploy them.
Now add Microsoft and Google SSO.
Mike Baptiste
supported this idea
·
Finally!!!
Only admins should be able to manage custom domain settings.
Just about every businesses with a custom domain is going to have multiple mailboxes. BUT many of us also have generic addresses (sales@acme.com, etc) that often go to shared mailboxes multiple people monitor, etc.
In our case, we would likely have all our quotes and invoices go out from our sales@....com email address. But I suspect some other groups might want them to be sent from whatever Xero user is sending the invoice. It should provide for that flexibility.
Goes without saying that this has to have full SPF/DKIM (via CNAME) support