Authorization

When you add a NetSuite card to a flow for the first time, Okta Workflows prompts you to configure the connection. This connection links to your NetSuite account and saves your account information, so you can reuse the connection for future NetSuite flows.

Before you begin

  • To create the NetSuite connector, you must be an Okta super admin or a Workflows Administrator and have an admin role in NetSuite.
  • To ensure the NetSuite connector works properly with Okta Workflows, verify that the NetSuite roles that are used for the connection have the following permissions:

    • You have access to the REST Web Services permission. This permission is located in Permissions > Setup.

    • You have access to the Log in using Access Tokens permission. This permission is located in Permissions > Setup.

    • You have edit access to the SuiteAnalytics Workbook permission. This permission is located in Permissions > Reports.

Procedure

Complete the following tasks to create a connection to a NetSuite account.

Enable the web services feature

The NetSuite Web Services feature must be enabled before you submit any web services requests.

  1. Sign in to NetSuite as an admin.

  2. Go to Setup > Company > Enable Features.

  3. Select the SuiteCloud tab.

  4. Enable REST WEB SERVICES under the SuiteTalk (Web Service) section.

  5. Enable TOKEN-BASED AUTHENTICATION under the Manage Authentication section.

  6. If required, review and agree to the SuiteCloud terms of service.

Create an app for token-based authentication (TBA)

  1. Go to Setup > Integration > Integration Management > Manage Integrations > New.

  2. Enter a Name for your app.

  3. Confirm that the app State is set to Enabled.

  4. On the Authentication subtab:

    1. Enable Token-based Authentication.

    2. Disable the TBA: Authorization Flow.

    3. Disable the Authorization Code Grant.

  5. Click Save.

The confirmation page shows the Consumer Key / Client ID and the Consumer Secret / Client Secret for this app.

Create a token for token-based authentication

  • In your NetSuite Home dashboard, click Manage Access Tokens under the Settings section.

  • On the My Access Tokens page, click New My Access Token.

  • On the Access Token page, select the app you created in the previous task.

  • The Token Name is already populated by default with a concatenation of Application Name, User, and Role. However, you can enter your own name for this token.

  • Click Save.

The confirmation page shows the Token ID and Token Secret.

Record your NetSuite configuration

To create the NetSuite connection, you need two pieces of account information from your NetSuite configuration.

  1. Go to Setup > Company > Company Information.

  2. Copy your Account ID.

  3. To get the subdomain of your SuiteTalk Web Service URL, select the Company URL subtab.

  4. In the SuiteTalk (SOAP and REST web services) field, copy the value that appears between the https:// and .suitetalk.api.netsuite.com portions of the URL. For example, if the URL is https://MY_SUBDOMAIN.suitetalk.api.netsuite.com, your subdomain is MY_SUBDOMAIN.

Create your Okta Workflows

Finally, you can create the NetSuite connection in Okta Workflows.

  1. Open the Connections tab in the Workflows Console or open a NetSuite flow card.
  2. Click New Connection.
  3. Enter a connection Name. Having a unique name for the connection is useful if you plan to create multiple connections to share with your team.
  4. Optional. Enter a connection Description. This can be any useful information regarding your connection.
  5. In the Consumer Key / Client ID field, enter the Consumer Key / Client ID value from your NetSuite app.
  6. In the Consumer Secret / Client Secret field, enter the Consumer Secret / Client Secret value from your NetSuite app.
  7. In the Token ID field, enter the Token ID from your TBA token.
  8. In the Token Secret field, enter the Token Secret from your TBA token.
  9. In the Account ID field, enter the Account ID from your Company Information page.
  10. In the Subdomain field, enter the subdomain of your SuiteTalk (SOAP and REST web services) URL.
  11. Click Create.