Required Action: Change Your Authentication Method for Integrations

This notice is intended for accounts with RESTlets or SOAP web services integrations that still use user credentials as an authentication method for the Administrator or other highly privileged roles.

This approach is prohibited, because authenticating with user credentials is not compliant with the Mandatory Two-Factor Authentication (2FA) policy for Administrators and other highly privileged roles. To comply with this policy, you must use Token-based Authentication (SuiteAnswers ID 41827), or OAuth 2.0 (SuiteAnswers ID 91092) for your integrations.

Mandatory 2FA Policy Summary

Administrators and other highly privileged roles must authenticate in a way that is compliant with the Mandatory 2FA policy for UI and non-UI access to NetSuite. Using user credentials to access NetSuite through the Application Programming Interface (API) for these roles is prohibited as the authentication method is not compliant with the Mandatory 2FA policy. NetSuite offers other authentication methods that are compliant with the policy and strengthen security of your account: Token-based Authentication and OAuth 2.0.