Netsuite Token-based Authentication – Searchspring Help Desk

NetSuite now requires an advanced security feature called Token-Based Authentication in order to continue to pull in product updates to Searchspring successfully. You'll need to enable Token Based Authentication (TBA) in your store and send us a few additional credentials as well.

Overview

Enable Token Based Authentication (May already be enabled)
Update the RESTlet bundle
Generate a token
Give Searchspring the token-id and token-secret (on the Data Feed page)

1. Enable the Token-based Authentication Feature

Before you can begin using TBA in your account, you must enable the feature.

To enable the token-based authentication feature:

Go to Setup > Company > Setup Tasks > Enable Features.
Click the SuiteCloud subtab.
Scroll down to the SuiteScript section, and ensure the following boxes are checked:

Client SuiteScript.
Server SuiteScript. Click I Agree on the SuiteCloud Terms of Service page.

Scroll down to the Manage Authentication section, and check the Token-based Authentication box. Click I Agree on the SuiteCloud Terms of Service page.
Click Save.

After the TBA feature is enabled:

The Manage Access Tokens link becomes available in the Settings portlet for users with Administrator role, or users with a role that has been assigned the appropriate permission. See Finding Your Settings Portlet if you need help locating it.
Administrators (or users assigned the Full level of the Setup Type Integration Application permission) can create applications for use with token-based authentication. See Creating Applications for Token-based Authentication. For more detailed information, see Creating an Integration Record.

2. Update Searchspring Product Stream RESTlet Bundle

Navigate to: Customization > SuiteBundler > Search & Install Bundles > List.
Find the “Searchspring Product Stream RESTlet” bundle
The “Action” dropdown menu includes an “Update” option, that you can click to update a bundle.

The “Action” dropdown is the green icon at the beginning (left) of the row.

This takes you to an update preview, you’ll have to click “Update” on this page to proceed with the update.
You should see a list of installed bundles again, with the “Searchspring Product Stream RESTlet” bundle status showing “Pending…”

This will be “Pending…” until the bundle is updated.

You can click “Refresh” to see an updated status
Once “Pending…” changes to a green checkmark, you can proceed to generate a token

3. Generate Access Tokens

There are two ways to do this, depending on the role/privileges the person creating a token has, and who they are creating it for.

Option 1: Administrators can only create tokens for their own use, and must use the Settings Portlet
Option 2: Users with ‘Access Token Management’ permission can create tokens for the current user and role

Option 1

To create a token using the Manage Access Tokens link:

Log in using a role with the User Access Token permission.
In the Settings portlet, click Manage Access Tokens.

This is located in the lower left section of the home page

The My Access Tokens page displays, listing all the tokens for the current user in the current role.
Click New My Access Token.
The Access Token page displays.
On the Access Token page:
1. For Application Name, select Searchspring RESTlet.
2. The Token Name is already populated by default with a concatenation of Application Name, User, and Role. Enter your own name for this token, if desired.
Click Save.
The confirmation page displays the Token ID and Token Secret.
For security reasons, the only time the Token ID and Token Secret values are displayed is on the confirmation page. After you leave this page, theses values cannot be retrieved from the system. If you lose or forget these credentials, you will need to create a new token and obtain new values.
Treat these values as you would a password. Never share these credentials with unauthorized individuals and never send them by email.

Option 2

To create and assign a TBA token:

Log in as a user with the Access Token Management permission.
Go to Setup > Users/Roles > User Management > Access Tokens > New.
On the Access Tokens page, click New Access Token.
The Access token page displays.
On the Access Token page:

For Application Name, select Searchspring RESTlet.
Select the User.
Select the Role.
The Token Name is already populated by default with a concatenation of Application Name, User, and Role. Enter your own name for this token, if desired.

Click Save.
The confirmation page displays the Token ID and Token Secret.
Warning: For security reasons, the only time the Token ID and Token Secret values are displayed is on the confirmation page. After you leave this page, these values cannot be retrieved from the system. If you lose or forget these credentials, you will need to create a new token and obtain new values.
Treat these values as you would a password. Never share these credentials with unauthorized individuals and never send them by email.

4. Final Steps

Once you have the Token ID and Token Secret, input them in the Searchspring Data Feed Page:

Please Note:

You do not need to clear the email and password, leave these alone until we are sure the new token is working correctly.
You do not need to enter values for consumer key and consumer secret, these will be removed from the page very soon.

NetSuite