Happy Friday everyone! 🙌 I’m a new NetSuite developer trying to test the application’s REST API. I followed these instructions for enabling TBA in NetSuite and used the account id, access token, token secret, and consumer id/secret for the NetSuite REST API Postman Tutorial. I’m using a sandbox instance. However, I’m getting a

401 Invalid login attempt.

error while trying to submit the very first request. When I check the Login Audit Trail Search within NetSuite, I don’t see any trace of my login attempt. Any pointers on how to debug this issue?

too many ids

Thanks for the quick response! Sorry, I mistyped. I meant I included the account id, consumer id/secret, access token, and token secret. I got the access token and token secret by creating an access token token under

Setup > User/Roles > Access Tokens

. Am I doing something incorrect here?

you dont need to do the 3 step flow if you already have an access token

I see. Thanks. I followed the instructions for setting up the Audit Log, but for some reason nothing shows up in the logs even though Postman indicates the requests are going through (but failing):

{
  "type": "<https://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.2>",
  "title": "Unauthorized",
  "status": 401,
  "o:errorDetails": [
    {
      "detail": "Invalid login attempt.",
      "o:errorCode": "INVALID_LOGIN_ATTEMPT"
    }
  ]
}

Do you know what might be causing this behavior?

its means your attempt is not very close

I see, does that mean that either my client id or token id is incorrect? I can try generating new ones.

your header is not correct if you think a token id is involved

This is my header:

Authorization: OAuth realm="80***_SB1",oauth_consumer_key="12967***",oauth_token="a4b2c****",oauth_signature_method="HMAC-SHA256",oauth_timestamp="1650074460",oauth_nonce="SNFdZTTO161",oauth_version="1.0",oauth_signature="7pT9m***"

Is the

oauth_token

not the same thing as the token ID?

it is, but thats not what you use for the 3 step flow

Sorry for the confusion — this isn’t the 3 step flow. This is the Postman tutorial, specifically the request to

OPTIONS <https://8025440-sb1.app.netsuite.com/services/rest/*>

.

did you setup the postman environment?

Yep, I did. I imported the environment and populated all the environment variables.

which ones

All the ones except for

REST_SERVICES

.

suspect values are the account id and the consumer key

hmm let me take a look

id go for regenerating all the keys

Wow, I finally found the issue… I was using

https://***-<http://sb1.app.netsuite.com/services/rest/*|sb1.app.netsuite.com/services/rest/*>

instead of

https://***-<http://sb1.suitetalk.api.netsuite.com/services/rest/*|sb1.suitetalk.api.netsuite.com/services/rest/*>

.