NetSuite Token Based Authentication (TBA) Setup for Sellware

1. Determine your NetSuite Account ID

1. Setup > Integration > Web Services Preferences
2. Take note of the Account ID in the Primary Information section

2. Create a NetSuite Integration Record

The integration record identifies the application in NetSuite’s system.  Create an integration specific for Sellware

1. Setup > Integration > Manage Integrations
2. Create a integration record for Sellware, if one for Sellware doesn't already exist.  
   • Name: Sellware
   • Authentication: Token-Based Authentication
   • State: Enabled
3. Record the credentials for later use (Be sure to store these for future use in a secure manner.)

Application ID: ________________________________

Consumer Key:  ______________________________

Consumer Secret: _____________________________

Note: If the integration record already exists, but you don’t have the consumer key and consumer secret, edit the record, then press Reset Credentials.

3. Enable NetSuite Token Based Authentication

1. Setup > Company > Enable Features
2. Under SuiteCloud > SuiteTalk (Web Services), ensure “SOAP Web Services” is enabled
3. Under SuiteCloud > Manage Authentication, ensure “Token Based Authentication” is enabled
4. Click "Save"

If this feature is not enabled, you will not see the permissions required in the next step.

4. Create a new Sellware role in NetSuite

1. Setup > Users/Roles > Manage Roles > New
2. Enter "Sellware" in the Name field
3. Enter "sellware" in the ID field
4. Select All for Accessible Subsidiaries in the Subsidiary Restrictions section
5. Check the Web Service Only Role checkbox in the Authentication section
6. Under Permissions > Transactions, add:
   • Credit Memo with Full Level (from the drop-down on the right)
   • Find Transaction with Full Level
   • Fulfill Orders with Full Level
   • Invoice with Full Level
   • Invoice Sales Orders with Full Level
   • Item Fulfillment with Full Level
   • Sales Order with Full Level
   • Sales Order Approval with Full Level
7. Under Permissions > Lists, add:
   • Accounts with Full Level (from the drop-down on the right)
   • Bins with Full Level
   • Commit Orders with Full Level
   • Companies with View Level
   • Customer Profile with Full Level
   • Customers with Full Level
   • Currencies with View Level
   • Departments with View Level
   • Documents and Files with View Level
   • Items with Full Level
   • Locations with View Level
   • Media Folders with View Level
   • Notes Tab with Full Level
   • Payment Methods with View Level
   • Perform Search with Full Level
   • Record Custom Field with Full Level
   • Related Items with Full Level
   • Shipping Items with Full Level
   • Units with View Level
8. If available in Permissions > Lists, add:
   • Subsidiaries with View Level
   • Sales Channels with View Level
   • Suppliers with View Level
   • Tax Items with View Level
9. Under Permissions > Setup, add:
   • User Access Tokens with Full Level (Required for Token Based Authentication)
   • SOAP Web Services with Full Level  (Required for Token Based Authentication)
   • Custom Body Fields with Full Level
   • Custom Lists with Full Level
   • Custom Record Types with Full Level
   • Customer Status with Full Level

Note: You may choose to use an existing role with at least these permissions but you MUST perform Step 4.9 in order to proceed to Step 5.  

5. Assign the Sellware role to a new or existing employee user

1. Lists > Employees 
2. Select the employee user that you wish to use with the Sellware integration
3. Click Edit to edit the user
4. In the Access Tab, add the Sellware role
5. Click Save

6. Create NetSuite Access Token

1. Setup > Users/Roles > Access Tokens > New
2. Select New Access Token
3. Select “Sellware” Application
4. Select the user that you added the Sellware role
5. Select “Sellware” role from dropdown
6. Click Save

Record the Token ID and Token Secret for later use

Token ID: ________________________________

Token Secret: _____________________________

7.  Update NetSuite Channel in the Sellware Application

1. Add or Edit NetSuite channel
2. Select Token authentication
3. Enter the Account ID, Consumer Key, Consumer Secret, Token ID and Token Secret that you recorded above
4. You do not need to modify the Netsuite API URL and NetSuite Image URL Prefix fields unless you have discussed with Sellware support.
5. Press Save
6. If everything worked properly, you will see:  “Saved and verified connection”

This new integration has a number of benefits, including:

1. The NetSuite connection with Sellware is not tied to the user's password, so changing the password will not cause failure.
2. You are allowed more concurrent connections within NetSuite when using Token Based Authentication.
3. Compliance with NetSuite 2FA and RESTlets (NLAuth) guidelines for web service integrations using the passport object with the login operation or with Request Level Credentials (RLC)