The redirect from the 3rd party page back to NetSuite is the login page or your suitelet? If your on a page that was hosted by a 3rd party, but the action on a form is to post to a url at NetSuite, I'm not sure Netsuite would think your authenticated.