mail.windowsazure.com not sending invite or password reset emails from my api management service

Hi @Steve Eddings ,

Thanks for reaching out to Microsoft Q&A.

When it comes to Azure API Management (APIM) invite and password reset emails, the key thing to know is that APIM sends these emails from its own mail service. So even if you set Organization email / Administrator email to @mail.windowsazure.com, the recipient mailbox still depends on how APIM is configured to send and authenticate the outgoing email.

APIM sends notifications/invites using email templates and APIM’s configured email settings, but the actual sending behavior is controlled by APIM (not your own mail server). In particular:

• The email is sent on behalf of the “From/Originating” configured address.
• The From header always contains ******@mail.windowsazure.com (this is by design).
• If the email authentication/DKIM signature doesn’t validate for the sending domain, mail systems may mark messages as junk/spam. (Gmail/Junk filtering can be involved even when you don’t see them in standard junk.)

So, it’s expected that your mail server “never receives email” from your APIM setting—because APIM itself is the sender, not your custom mail infrastructure.

In APIM, confirm the email settings used by the templates/notifications:

• Update the administrator email address / organization name / originating email in APIM’s email settings (via Portal/REST/PowerShell as applicable).
• After changing those settings, verify you’re actually using the email templates/notification paths that generate invite and password reset messages for developers.

If you’re triggering password resets from APIM developer accounts, the expected flow is:

• In APIM Developer portal → Users → select user → Reset password → choose to send the reset email.
• APIM generates the reset email using a template.

(So it’s worth confirming you’re using the APIM “Reset password” flow for the specific developer user.)