NetSuite Token-Based Authentication

Connecting to NetSuite Using Token-Based Authentication

You can connect to NetSuite using Token-Based Authentication (TBA) by providing your account ID, consumer key, consumer secret, and access token. This authentication method ensures secure access without requiring user credentials, enhancing both security and automation in your integration.

Note: For instructions on how to obtain an account ID, see Obtaining a NetSuite Account ID.

Perform the following actions to enable the token-based authentication in NetSuite.

Enabling the Token-Based Authentication

Select Setup > Company > Enable Features.

NetSuite Enable Features

Then click SuiteCloud.

Select SuiteCloud in Enable Features

In Manage Authentication, select the Token-Based Authentication checkbox.

Select Token-Based Authentication and OAUTH 2.0 checkboxes

Creating a Role

Create a role with the necessary permissions for the objects you would like to use.

Select Setup > User/Roles > Manage Roles > New.
Assign the necessary permissions for the integration with the ODBC driver.

Note: You can grant the following permissions in Setup:

SOAP Web Services
User Access Tokens
Custom Record Types
Custom Lists
Custom Fields

All available permissions can be found in the Transactions and Lists panes of NetSuite. At a minimum, SOAP Web Services and User Access Tokens permissions are required.

Select Lists > Employees > Edit User > Access Roles > Roles, then assign this role to the required user.

Creating an Integration Record

Select Setup > Integration > Manage Integrations > New.

Select Setup > Integration > Manage Integrations > New

Enter a Name for the application, select Token-Based Authentication, and deselect TBA: Authorization Flow.

Enter an application name and select Token-Based Authentication checkbox in the Integration window

Click Save.
In the Confirmation window, copy the Application ID at the top of the Integration pane.

Copy Application ID in the Integration pane

Next, copy the generated Consumer Key / Client ID and Consumer Secret / Client Secret.
Save these values somewhere because you will not be able to retrieve them after leaving this page. If you need these values again, you will have to re-generate them, which makes the old ones stop working.

Creating an Access Token

Select Setup > Users/Roles > Access Tokens > New.

Select Setup > Users/Roles > Access Tokens > New

Select the Integration record, User, and Role created in the previous steps.

Access Token Primary Information

Click Save.
In the Confirmation window, copy the generated Token ID and Token Secret.
Save these values somewhere because you will not be able to retrieve them after leaving this page. If you need these values again, you will have to re-generate them, which makes the old ones stop working.

Copy the generated Token ID and Token Secret