How to Enable NetSuite Token-Based Authentication

Plans: Enterprise Platforms: All platforms

AfterShip Returns supports NetSuite TBA (Token Based Authentication) as an authentication type to prevent unauthorized access.

You can easily use TBA, once you make some required changes with respect to your NetSuite settings. Carefully follow the 5 steps given below to be able to establish a connection with AfterShip Returns:

Step 1: Get the account ID

Access your Oracle NetSuite account > Go to the Setup tab > Company > Company Information
Your account number will be listed under the Account ID field
Copy it for later use

Step 2: Enable Token Based Authentication (TBA)

Again, go to the Setup tab of your Oracle NetSuite account > Company > Enable Features > SuiteCloud > Manage Authentication
In the SuiteScript section, check Client SuiteScript and Server SuiteScript
In the SuiteTalk (Web Services), check REST Web Services
In the Manage Authentication section, check Token-Based Authentication
Scroll to the bottom of the page and click Save

Step 3: Create an Integration Record

Once the TBA is enabled, go back to the Setup tab > click on “Integrations” > Manage Integrations > New
Set the name to "AfterShip Integration" and perform these actions

Check the "Token-Based Authentication" option
Uncheck the "TBA: AUTHORIZATION FLOW" and "AUTHORIZATION CODE GRANT" options
Check the "TBA: ISSUETOKEN ENDPOINT" option



In case you already have an integration record for AfterShip, you can reuse it by simply modifying settings as mentioned above.

Copy the values mentioned for “Consumer Key/Client Key” and “Consumer Secret/Client Secret”

Note: You can reuse the values for multiple access tokens.

Make sure that you copy the values properly, as they will be shown only once.

Step 4: Create a role and assign users

Go to Setup > Users/Roles > Manage Roles > New
Create a role and allow necessary permissions for successful AfterShip integration.

Before set all permissions you will need to set the Subsidiary Restrictions to All



Here’s what you need to take care of:

Lists - Customers
Lists - Contacts
Lists - Currency
Lists - Items
Lists - Perform Search
Lists - Persist Search
Lists - Accounts
Lists - Address List in Search
Lists - Custom Record Entries
Lists - Locations Full
Lists - Resource Full
Lists - Resource Allocation Approval
Lists - Resource Allocations
Lists - Resource Groups
Reports - SuiteAnalytics Workbook
Transactions - Find Transactions
Transactions - Sales Order
Transactions - Item Fulfillment Full
Transactions - Fulfill Sales Orders Full
Transactions - Return Authorization (for RMA creation feature) Full
Transactions - Return Auth.Approval Full
Transactions - Credit Memo Full
Transactions - Credit Returns Full
Transactions - Item Receipt Full
Transactions - Receive Order Full
Transactions - Refund Returns Full
Transactions - Sales Order Approval Full
Setup - SOAP Web Services
Setup - Rest Web Services
Setup - User Access Token (for Token-Based Authentication)
Setup - Custom Transaction Fields
Setup - Log in using Access Tokens

Make sure each created role has the "User Access Tokens" permission, as it’s important for using the TBA.

Now, assign the created role to concerned individuals. Go to Lists > Employees > Employees > Edit user > Access > Roles

Step 5: Create an Access Token for the Integration record, User, and Role

Go to Setup > Users/Roles > Access Tokens > New
Select the Integration record, User, and Role that you’ve created by following the aforementioned steps
Token Id and Token Secret will be displayed after tapping the Save button. Copy the values for AfterShip Returns integration

Establish a connection with AfterShip Returns

Visit the AfterShip Returns and NetSuite integration page and paste all the copied values to establish a successful connection with AfterShip Returns.




The same Consumer Key, Consumer Secret, Token ID, and Token Secret can be used multiple times while creating more connections.

For any help, contact our chat support team.

Updated on: 15/11/2023