Onsight’s custom integration for NetSuite connects to NetSuite using Token Based Authentication (TBA). The following process sets up ‘Token Based Authentication’, creates a ‘Role’ and a ‘User’ for the integration to use, creates an ‘Integration Application’ record and then generates a ‘Token ID’ and ‘Token Secret’ for the integration to use.

Most of the steps in this process require a NetSuite login that has Administrator permissions. Please log into NetSuite with an Administrator account and then complete the steps listed below. If you do not have Administrator privileges, you will not be able to complete this process.

Step 1: Enable the REST API Feature

Go to ‘Setup’ > ‘Company’ > ‘Enable Features’.
Go to the ‘SuiteCloud’ tab.
Go to the ‘SuiteTalk (Web Services)’ section.
Enabled ‘REST Web Services’.

If you are on an older version of NetSuite, you might also see these other two options and you should enable them as well:
‘REST Record Service’
‘REST Query Service’

Step 2: Enable the Token-based Authentication Feature

Go to ‘Setup’ > ‘Company’ > ‘Enable Features’.
Go to the ‘SuiteCloud’ tab.
Go to the ‘Manage Authentication’ section.
Enable ‘Token Based Authentication’.

Step 3: Set Up Token-based Authentication Roles

Go to ‘Setup’ > ‘Users / Roles’ > ‘Manage Roles’ > ‘New’.
Create a new role.
Type in a name: ‘Onsight Integration Role’.
For Center Type choose ‘Accounting center’.
Go to the Authentication section.
Enable ‘Web Services Only Role’ if you do not want us to be able to access the NetSuite interface. Leave it disabled if you want us to be able to log in and troubleshoot issues.
For ‘Two Factor Authentication’ choose ‘Not required’.

Go to the ‘Permissions’ tab and then click through each of the sub-tabs and enable all of the permissions listed below. Please also note that some are ‘View’ and some are ‘Full’. You need to specify these exactly as listed below.

Transactions – Find Transaction – Full
Transactions – Invoice – Full
Transactions – Quote or Estimate – Full (it might be called either Quote or Estimate in your system)
Transactions – Sales Order – Full

Reports – SuiteAnalytics Workbook – Edit

Lists – Contacts (to get contacts) – View
Lists – Customers – Full
Lists – Customer Profile – View
Lists – Documents and Files – View
Lists – Employees – View
Lists – Employee Records (this is used to get the Sales Rep field) – View
Lists – Gift Certificate – Full
Lists – Items – Edit
Lists – Locations – View
Lists – Perform Search – Full
Lists – Tax Records (to get taxes) – View
Lists – Tax Schedules (to get taxes) – View

Setup – Accounting Lists – View
Setup – Log in using Access Tokens – Full
Setup – Records Catalog – View
Setup – REST Web Services – Full
Setup – User Access Tokens – Full

Click ‘Save’. 

Step 4: Assign Users to the Token-based Authentication Role

Go to ‘Lists’ > ‘Employees’ > ‘Employees’ > ‘New’.
Create a new user.
Type in a name: ‘Onsight Integration User’.
For the email address, type: [email protected] where XXXX is an abbreviation of your company name. 
Go to the Access tab.
Enable ‘Give Access’.
Click ‘Manually assign password’.
Type in a password.  
Do NOT tick ‘Require password on next login’.
Go to the Roles sub-tab. 
Select the ‘Onsight Integration Role’. Click Add. 
Click ‘Save’. 

Step 5: Create an Integration Application Record

Go to ‘Setup’ > ‘Integration’ > ‘Manage Integrations’.
Click ‘New’.
Type in a name: ‘Onsight Integration’.
Type in a description: ‘Integration for connecting to the Onsight B2B Sales App’.
For ‘State’, choose ‘Enabled’.
Go to the ‘Authentication’ tab.
Go to the ‘Token-based Authentication’ section.
Enable ‘Token-based Authentication’
Go to the ‘User Credentials’ section.
Enable ‘User Credentials’.
Everything else in ‘Authentication’ tab should NOT be enabled. Specifically, ‘TBA: Authorization Flow’ should not be enabled.
Click ‘Save’.

IMPORTANT: At the very bottom of the screen, the confirmation page will display the Client Credentials (Consumer Key and Consumer Secret) for this new integration application. This is never displayed again so you must immediately copy and paste it somewhere safe and then send to us at the end of this process.  

Step 6: Create a Token ID and Token Secret

Go to ‘Setup’ > ‘Users/Roles’ > ‘Access Tokens’.
Click ‘New Access Token’.
The Access token page will display.
Select the Application Name. Should be ‘Onsight Integration’.
Select the User. This should be the user that we created in the previous step: ‘Onsight Integration User’.  
Select the Role. This should be the role that we created in the previous step: ‘Onsight Integration Role’. 
The Token Name is already populated by default with a concatenation of the ‘Application Name’, ‘User’, and ‘Role’. You can change this if you wish.
Click ‘Save’.

IMPORTANT: The confirmation page will display the ‘Token ID’ and ‘Token Secret’. This is never displayed again so you must immediately copy and paste it somewhere safe and then send to us at the end of this process.  

Step 7: Send us the integration connection details

Please send us the following items:

• Your NetSuite account ID. This is normally at the beginning of your URL: https://XXXXXX.app.netsuite.com/
• The email address that you used for the Onsight integration user.
• The consumer key and consumer secret
• The token ID and token secret