to get around this, i set up a web service only role with no 2FA and have integrations access netsuite with that web service role.