This site was built to compliment the existing NetSuite Professionals Slack Community by adding a means for members to easily find answers to common questions and to create a searchable database of those questions and answers.

NetSuite Professionals

i see TBA, but there seems to be the 3 step TBA auth flow which describes a user login form but the issuetoken endpoint is not recommended anymore?

• Users can generate tokens from their login: <https://system.netsuite.com/app/help/helpcenter.nl?fid=bridgehead_4254083671.html|User Access Token>
• Administrators can generate tokens for other users: <https://system.netsuite.com/app/help/helpcenter.nl?fid=bridgehead_4254081947.html|Access Token Management>
• Your server can ask users for permission so that your server can ask NetSuite for tokens: <https://system.netsuite.com/app/help/helpcenter.nl?fid=section_156337186044.html|The Three-Step TBA Authorization Flow>
• Your server can ask for login information from the user to ask NetSuite for tokens: <https://system.netsuite.com/app/help/helpcenter.nl?fid=section_156337184796.html|The IssueToken Endpoint>

the last option is unfavorable security wise since your server will have credentials that can login to netsuite

makes more sense from a security standpoint to use the first 2 options

either way, getting tokens is a one time operation

your server can reuse the tokens until revoked