Connector to NetSuite Token Authentication

With the NetSuite® Token Authentication connector, you can use commands in chain to interact with NetSuite. For example, with this connector, you can:

• Download files from NetSuite
• List saved searches in NetSuite
• Retrieve data about a standard NetSuite record or saved search

Note: This connector is built by Workiva and connects to a third-party system. While our Support team can help configure this connector within your workspace, we are unable to troubleshoot or otherwise assist with any issues that originate outside of the Workiva platform.

Prerequisites

To enable the connection, the connector uses the NetSuite REST API. To set up the connector, you'll need:

• NetSuite, with token-based authentication (TBA) enabled
• The ID of the NetSuite account to connect to

  Note: To view your account ID in NetSuite, select Setup, Integrations, Web Services Preferences. The ID also typically appears in the first string of the URL, just before app.netsuite.com.

• An integration record and access token created in NetSuite for the connector
• The integration record's consumer key and secret

  Note: If you don't have the consumer secret or key, edit the integration record and reset its credentials.

• The access token's ID and secret. If you don't have the access token's ID or password, you'll need to create a new token.

Note: To interact with a NetSuite RESTlet using OAuth 2.0 authentication, use an HTTP Request connector instead.

Enable the integration in NetSuite

To enable the connector to interact with NetSuite, it requires token-based authentication (TBA) and its own integration record.

Step 1. Enable SOAP web services and token-based authentication

To enable SOAP web services and TBA for NetSuite:

1. In NetSuite, select Setup, Company, Enable features.
2. On the SuiteCloud tab, under SuiteScript, select Client SuiteScript and Server SuiteScript.
   
3. Under SuiteTalk (Web Services), select SOAP web services.
   
4. Under Manage authentication, select Token-based authentication.
5. Click Save.

 

Step 2. Create an integration record

After you enable TBA, create an integration record for the connector:

1. In NetSuite, select Setup, Integrations, Manage integrations, New.
2. To help identify the integration, enter a unique name and description, such as Workiva Integration.
   
3. Under Authentication, select Token-based authentication, and clear TBA: Authorization flow.
4. Click Save, and record the consumer key and secret from the confirmation page.

Note: The consumer key and secret appear only on the integration record's confirmation page. Be sure to record these values for the connector's properties, and treat them like a password.

Step 3. Create an integration role

For security purposes, create a dedicated role in NetSuite to manage your integrations:

1. Select Setup, Users/Roles, Manage roles, New.
   
2. Under General, enter a unique name to help identify the role, such as Workiva/NetSuite Integration.
3. Under Authentication, select Web services only role to enable the role to connect to only the NetSuite API, and not log in to NetSuite directly.
4. Under Permissions, add the permissions to enable the integration, such as Full-level permissions to all relevant Transactions, Reports, and Lists in NetSuite.
5. On the Setup tab under Permissions, add Full-level permissions for:
   
   • SOAP web services
   • Set up company
   • Token-based authentication:
     • To enable the role to only authenticate via access tokens, Login using access tokens
     • To enable the role to create and revoke its own access tokens, User access tokens
       
     
6. Click Save.

 

Step 4. Assign the role to the integration user

After you create integration role, assign it to the connector's integration user:

1. In NetSuite, select Setup, Users/Roles, Manage users.
2. Select or create the integration user for the connector.
   

   Note: We recommend a separate user for each connector or integration.

3. Under Roles, assign the integration role to the user.

 

Step 5. Create the integration user's access token

To create an access token for the integration user:

1. In NetSuite, select Setup, Users/Roles, Access tokens, New.
2. Click New access token.
   
3. In Application name, select the integration record.
4. In User, select the integration user.
5. In Role, select the integration role.
6. Click Save.
7. Note the ID and secret created for the token; you'll need them for the connector's properties.

   Note: For security purposes, the ID and secret appear only when the access token is created. Treat them as you would a password. If you don't have the token's ID or secret for the connector's properties, create a new token for the integration user.

 

Set up the NetSuite Token Authentication connector

Note: To make the connector available for use in your organization's chains, an org security administrator first enables it from Configuration.

1. From Chain Builder, click Connections  compare_arrows, and then Create at the top right.
2. Under BizApp Connection, select NetSuite Token Authentication and the default CloudRunner.
   
3. Enter a unique name and description to help identify the connection.
4. Under Properties, enter the connection's details:
   
   

   Property	Details
   Account ID	Enter the ID of the NetSuite account to connect to.
   Consumer key	Enter the consumer key for the connector's integration record.
   Consumer secret	Enter the secret for the Consumer Key property.
   Token ID	Enter the ID of the connector's access token.
   Token secret	Enter the secret for the Token ID property.
   Sandbox	To connect to a sandbox NetSuite account, check this box.

   Note: All sensitive credentials are automatically encrypted and stored at Advanced Encryption Standard (AES)-256 encryption.

5. Select the environments to use the connection, and click Save.
6. To test the connection, create and run a chain with the connector's List Saved Searches command, and verify it returns a valid output.

Troubleshooting

Custom fields

Please note that the NetSuite API cannot return custom fields. As an alternative, Data Prep can create transformations that mimic the logic of a Netsuite custom field.

 

Connections

If the connection to NetSuite fails:

• Check the account ID entered for the connector. To view the account ID in NetSuite, select Setup, Integrations, Web Services Preferences. The ID also typically appears just before app.netsuite.com in the URL.
• Verify the consumer key and secret of the connector's integration record. If necessary, edit the integration record and reset its credentials to create a new consumer key and secret.
• Verify the ID and secret of the connector's access token. If necessary, create a new token for the connector.