Token Based Authentication for SuiteTalk

Token-based authentication is being extended to support SuiteTalk (web services), de-coupling web services authentication from password expiration. With this feature, client applications will be able to access web services using a token, significantly reducing the risk of compromising user credentials.

• Enable Token Based Authentication

  • Go to Setup > Company > Setup Tasks > Enable Features.
  • Click the SuiteCloud subtab.
  • Scroll down to the SuiteScript section, and check the following boxes: Client SuiteScript. Server SuiteScript. Click I Agree on the SuiteCloud Terms of Service page.
  • Scroll down to the Manage Authentication section, and check the Token-based Authentication box. Click I Agree on the SuiteCloud Terms of Service page.
  • Click Save

• Create a Token Role

  • Global search for page: role, then choose “New Role”
  • Navigate to Permissions > Setup and add the following permissions:
    • User Access Token: Full
    • Access Token Management: Full
    • Web Services: Full

• Token Management Permissions

  • Go to Lists > Employees > Employees.
  • Click Edit next to the name of the employee you want to assign the token-based
    authentication role.
  • Click the Access subtab.
  • In the Role field, select the token-based authentication role for this employee.
  • Click Add.
  • Click Save.

• Create Integration Record

  • Go to Setup > Integration > Integration Management > Manage Integrations > New
  • Enter a Name for your application.
  • Enter a Description, if desired
  • The application State is Enabled by default. (The other option available for selection
    is Blocked.)
  • Enter a Note, if desired.
  • Check the Token-based Authentication box on the Authentication subtab
  • Click Save.
  • The confirmation page displays the Consumer Key and Consumer Secret for this application. Copy/paste them into corresponding fields in Pscore NetSuite connection dialog

• Create Access Token

  • Global search for page: tokens
  • New Access Token
  • Select the application and role we created earlier, then press save.
  • Copy the token ID and token secret and paste them into corresponding fields in
    Pscore NetSuite connection dialog

• Get Account ID

  • Goto Setup -> Integration -> Web Services Preferences
  • Copy the Account ID and paste it into corresponding field in Pscore NetSuite
    connection dialog

You can implement this “Token Based Authentication”, using SuiteScript 2.0 as well.

require(['N/https', '/SuiteScripts/oauth', '/SuiteScripts/secret'], function(https, oauth, secret) {

   var headers = oauth.getHeaders({ });

   var body = {}

   headers['Content-Type'] = 'application/json';

   var restResponse = https.put({ });

});