Configure NetSuite
Set up Token-Based Authentication (TBA) to connect Order Invoicer to NetSuite
Prerequisites
Before you begin, make sure that:
- You have an active NetSuite account (production or sandbox)
- You have administrator access to your NetSuite account
- The SuiteTalk REST Web Services and Token-Based Authentication features are enabled
Order Invoicer connects to NetSuite via Token-Based Authentication (TBA / OAuth 1.0a). You will therefore need to provide five values:
- Account ID (e.g.
1234567or1234567_SB1for a sandbox) - Consumer Key and Consumer Secret (from an Integration record)
- Token ID and Token Secret (from an Access Token)
Enable the required features
Enable SuiteTalk REST and TBA
- Log in to NetSuite with an administrator account
- Go to Setup → Company → Enable Features
- On the SuiteCloud tab, check:
- ✅ REST Web Services
- ✅ Token-Based Authentication
- Save
If these options do not appear, check that your NetSuite license includes SuiteCloud Plus. Contact your NetSuite reseller if needed.
Retrieve your Account ID
Find your Account ID
- Go to Setup → Company → Company Information
- Note the value of the Account ID field (e.g.
1234567in production,1234567_SB1for a sandbox)
The Account ID is used in the API URL (https://{accountId}.suitetalk.api.netsuite.com) and in the signature of each request. Keep it as is — Order Invoicer normalizes it automatically.
Create an Integration record
The Integration record provides the Consumer Key / Consumer Secret pair.
Create the Integration
- Go to Setup → Integration → Manage Integrations → New
- Fill in:
- Name:
Order Invoicer - State:
Enabled
- Name:
- Check:
- ✅ Token-Based Authentication
- ❌ Uncheck the other methods (TBA: Authorization Flow, OAuth 2.0, User Credentials)
- Click Save
Copy the Consumer Key and Consumer Secret
After saving, NetSuite displays only once:
- Consumer Key
- Consumer Secret
Copy both values immediately and keep them somewhere safe.
These values are only displayed once. If you lose them, you will need to reset the Integration.
Create a dedicated role and user
Order Invoicer recommends a dedicated user with a minimal role to limit the scope of access.
Create a role
- Go to Setup → Users/Roles → Manage Roles → New
- Fill in Name:
Order Invoicer Integration - On the Permissions → Setup tab, add:
- ✅ Log in using Access Tokens (Full)
- ✅ REST Web Services (Full)
- ✅ User Access Tokens (Full)
- On the Permissions → Lists tab, add:
- ✅ Customers (Full)
- ✅ Items (View)
- ✅ Subsidiaries (View) — only for OneWorld accounts
- On the Permissions → Transactions tab, add:
- ✅ Invoice (Full)
- ✅ Find Transaction (View)
- Click Save
Assign the role to a user
- Go to Setup → Users/Roles → Manage Users
- Select or create a dedicated user (e.g.
order-invoicer@votre-domaine.com) - On the Access tab, add the
Order Invoicer Integrationrole - Click Save
The user does not need to log in to the NetSuite interface — the Access Token acts on their behalf.
Create an Access Token
The Access Token provides the Token ID / Token Secret pair.
Generate the token
- Go to Setup → Users/Roles → Access Tokens → New
- Select:
- Application Name:
Order Invoicer(the Integration created earlier) - User: the dedicated user
- Role:
Order Invoicer Integration
- Application Name:
- Token Name:
Order Invoicer Token - Click Save
Copy the Token ID and Token Secret
NetSuite displays only once:
- Token ID
- Token Secret
Copy both immediately.
As with the Integration, these values are only displayed at creation. If lost, you will need to regenerate the Access Token.
Enter your credentials in Order Invoicer
From the NetSuite connection form in Order Invoicer, fill in the five fields:
| Field | Value |
|---|---|
| NetSuite Account ID | 1234567 or 1234567_SB1 |
| Consumer Key | from the Integration |
| Consumer Secret | from the Integration |
| Token ID | from the Access Token |
| Token Secret | from the Access Token |
The connector automatically validates your credentials by making a signed request to the NetSuite API.
Troubleshooting
"Invalid credentials" error
- Check that the five values were copied in full, with no leading or trailing spaces
- Account ID: if your account is a sandbox, the
_SB1(or_SB2, etc.) suffix is required - Check that the Integration and the Access Token are in the Enabled state (not revoked)
- Check that the role has the Log in using Access Tokens and REST Web Services permissions
"INSUFFICIENT_PERMISSION" error
- The role assigned to the user does not have the Customers (Full) or Invoice (Full) permissions
- Update the role's permissions and try again
"INVALID_LOGIN_ATTEMPT" error
- The user linked to the token is disabled or no longer has access to the role
- Check the user's Access tab
Invoice creation rejected on a OneWorld account
- OneWorld accounts require a mandatory
subsidiaryfield on customers and invoices - This first version of Order Invoicer does not yet populate this field — contact our support to enable subsidiary mapping
API reference
Support
If you run into difficulties:
- See the troubleshooting section above
- Consult the official NetSuite documentation
- Contact our support:
contact@orderinvoicer.com