Glossary › Email authentication
Reference · Glossary

compauth

Composite authentication (Microsoft 365)

Definition

Microsoft 365’s combined verdict on whether a message really came from the domain in its From address.

In plain words

Microsoft combines SPF, DKIM, DMARC and other signals into compauth=pass, fail, softpass or none, with a three-digit reason code. Reason 001 means the domain published no records, or only weak ones.

Why it matters to a firm

For a domain with no DMARC policy, or one at p=none, the verdict rests on Microsoft’s own judgement instead of a rule the firm published.

The check behind the finding

In Outlook, open the message’s headers and find Authentication-Results. Read compauth= and reason=.

The outside watch for your firm: see what is open before anyone else does, with the proof for the lead finding. Check my firm →