NetSuite OAuth 2.0 M2M (Client Credentials) Configuration Steps

Prerequisites

• Enable SuiteCloud > OAuth 2.0 in Setup > Company > Enable Features before starting.
• Role Permissions must match the scopes you intend to use.

Please note: Only RESTlets, REST Web Services, and SuiteAnalytics Connect are supported.

Steps for configuring

1. Log in with Administrator role
2. Ensure you have Administrator privileges to configure integrations.
3. Create an Integration Record
4. Navigate to Setup > Integration > Manage Integrations > New.
5. Enter a Name and enable the OAuth 2.0 option.
6. Select the Client Credentials grant type.
7. Define the required Redirect URI only if using other grant types (not needed for M2M).
8. Save the record to generate a Client ID and Client Secret.
9. On the integration record, select the scopes required for your use case:
10. RESTlets
11. REST Web Services
12. SuiteAnalytics Connect (Note: SOAP Web Services are not supported with OAuth 2.0.)
13. Create OAuth 2.0 Client Credentials Setup
14. Navigate to Setup > Integration > OAuth 2.0 Client Credentials Setup > New.
15. Fill in the following fields:
16. Entity: Select the employee record representing the integration user.
17. Role: Choose a role with permissions aligned to your scopes.
18. Application: Select the integration record created earlier.
19. Save the setup.
20. After saving, you’ll see the Client ID and Client Secret associated with the integration. These values are used to request access tokens via the OAuth 2.0 token endpoint.

Use the Client ID and Client Secret to request an access token from NetSuite’s OAuth 2.0 token endpoint.

Tokens expire after a set duration, refresh by re-requesting with the same credentials.

No certificate/private key is required for M2M (JWT Bearer Grant uses certificates, not Client Credentials).