Additionally, Your IT department has to update the claimrule on the ADFS server to remove the parameter “account” = <your Netsuite account number> , Otherwise you will only see your production SAML roles. If the parameter is removed then you will see both the production and sandbox