Skip to main content
CFCX Work

Authentication Updates in NetSuite 2022.2

2022.2 Authentication |

This release note was updated October 10, 2022. End of Support for HMAC-SHA1 Signature Method for TBA

Targeted for NetSuite 2023.1

The end of support for the HMAC-SHA1 signature method for the Token-based Authentication (TBA) feature is targeted for NetSuite 2023.1. Even though the end of support is not a part of the NetSuite 2022.2 release, you should update your integrations to use HMAC-SHA256 as soon as possible. After the end of support, any integrations using the TBA feature with HMAC-SHA1 as a signature method will stop working. The end of support and the request to change the signature method to HMAC-SHA256 also applies to third-party integrations. You must use the HMAC-SHA256 signature method to create new integrations for use with TBA. Before the end of support, you must update your authorization header to use HMAC-SHA256. To update the authorization header, change the values of the oauth_signature_method parameter and the oauth_signature parameter to HMAC-SHA256. For more information, see the following help topics:

  • Example OAuth Header
  • The Authorization Headers
  • The Signature for Web Services and RESTlets Important: If you are using a library for signing, verify that the library supports HMAC-SHA256, and if needed, update to a library with HMAC-SHA256 support.

OAuth 2.0 for SuiteAnalytics Connect

Since 2022.1, you can use the OAuth 2.0 feature with SuiteAnalytics Connect. Previously, you could use

OAuth 2.0 with RESTlets and REST web services only. You are now able to implement OAuth 2.0 for

SuiteAnalytics Connect using either the client credentials flow or the authorization code grant flow. NetSuite 2022.1 has extended the integration record by adding the SuiteAnalytics Connect box. To use the OAuth 2.0 feature with SuiteAnalytics Connect, check the SuiteAnalytics Connect box. The scope parameter in both the client credentials flow and the authorization code grant flow is also extended for use with SuiteAnalytics Connect. For more information about OAuth 2.0, see the help topic OAuth 2.0. For more information about OAuth 2.0 with SuiteAnalytics Connect, see the help topic OAuth 2.0 for Connect.