What I have is very similar to that. I do not have the Oauth token yet, and I have been using HMAC-SHA256. I have been trying to follow the 'Three-Step TBA Authorization Flow' process to obtain a token (/app/help/helpcenter.nl?fid=section_156337186044.html). I have an integration record, its consumer key and secret, and have enabled the relevant token-based authentication settings on the integration record. The roles that I have tested with have permissions to log in with TBA. I'm not sure what I am missing.

what step of the authorization flow are you on?

I am on the first step of the flow.

what parameters are you sending

Oauth oauth_consumer_key=[consumer key] oauth_signature_method=HMAC-SHA256 oauth_signature=[signature] oauth_timestamp=[timestamp] oauth_nonce=[nonce] oauth_version=1.0 oauth_callback=https://callbackUrl.com/path realm=TSTDRV#######

other than specifying the role

I am fairly certain. If I use the example data from the Netsuite helpcenter, I can generate the example signature. I have also added the role to the parameters above and got the same results.

are you getting a request to your callback url?

I haven't checked that. Should I be, at this stage?

i dont think so, i personally was hoping not to debug signatures