Upgrading NetSuite Integration Features to Remove the Dependency on SuiteSignOn

In NetSuite, enable the OAuth 2.0 and NetSuite as OIDC feature. See Enable the NetSuite as OIDC Provider Feature (External link to NetSuite SuiteAnswers | Answer ID: 98270).

If you are using your own custom role for the SuiteProjects Pro integration instead of the “SuiteProjects Pro Integration Administrator” role created by the SuiteProjects Pro SRP Integration (Bundle ID 369637) bundle, make sure that this custom role includes the following permissions and permission levels in the Setup secondary subtab. For more information, see Creating a Custom Role for the Integration in NetSuite.

• OIDC Provider Setup (Full)

• OAuth 2.0 Authorized Applications Management (Full)

• Log in using OAuth 2.0 Access Tokens (Full)

Update the SuiteProjects Pro Single Sign-on (Bundle ID: 369619) bundle to version 7.0 or later.

This bundle version:

• Updates SuiteScript 2 versions of Suitelet scripts to enable access to SuiteProjects Pro modules in the SuiteProjects Pro center tab using NetSuite as OIDC Provider.

• Updates the SuiteProjects Pro: Home module 2.0 Portlet script to enable access to the SuiteProjects Pro dashboard as a custom portlet on the NetSuite dashboard using NetSuite as OIDC Provider.

• Adds the script SuiteProjects Pro: Load Subtab to enable access to the SuiteProjects Pro record as a subtab on the matching record in NetSuite for selected NetSuite record types using NetSuite as OIDC Provider.

• Switches to using SuiteScript 2 versions of all scripts in the bundle automatically.

Create a custom integration record for the SuiteProjects Pro Within NetSuite feature and set it up for the NetSuite <> SuiteProjects Pro integration to use NetSuite as OIDC Provider for outbound single sign-on. See Create Integration Records for Applications that Use NetSuite as OIDC Provider for Outbound Single Sign-on (External link to NetSuite SuiteAnswers | Answer ID: 98323).

1. Use the following settings under the OAuth 2.0 section of the integration record:

   • Authorization code grant — Check the box. This is required for the NetSuite as OIDC Provider integration to work.

   • Redirect URI — Enter one of the following URIs, depending on the type of SuiteProjects Pro account type you are setting up for the integration:

     • Production account — https://auth.openair.com/oidc/callback/ internal_netsuite_<netsuite_account_id>

     • Sandbox account — https://auth.sandbox.openair.com/oidc/callback/ internal_netsuite_<netsuite_account_id>

     where <netsuite_account_id> is your NetSuite Account ID

     Important:

     Review the following guidelines:

     • All alphabetical characters in <netsuite_account_id> must be lowercase. If your NetSuite Account ID includes uppercase alphabetical characters, replace them with the lowercase equivalent. When setting up the integration between SuiteProjects Pro and NetSuite sandbox accounts, the NetSuite sandbox account ID typically includes the characters SB and should be replaced with the lowercase equivalent sb. For example, if your NetSuite Account ID is 345678_SB2, the Redirect URI is https://auth.sandbox.openair.com/oidc/callback/ internal_netsuite_345678_sb2.

     • Leave the Redirect URI unchanged when updating service URLs in your integrations to use the rebranded netsuitesuiteprojectspro.com domain name. Replacing the Redirect URI with the new domain name equivalent would cause the SuiteProjects Pro Within NetSuite feature to stop working.

     Note:

     OpenAir is now SuiteProjects Pro. As of 5 a.m. Eastern Time (UTC–5) on January 25, 2025, for your sandbox account, and on February 15, 2025, for your production account, service URLs with the netsuitesuiteprojectspro.com domain name replace URLs with the openair.com domain name.

     For your production account, the sign-in page URL now is https://auth.netsuitesuiteprojectspro.com/login and the account-specific domain is <company-id>.app.netsuitesuiteprojectspro.com. After signing in, you are redirected to an account URL with the netsuitesuiteprojectspro.com domain name. Any links or bookmarks to sign-in page or account URLs with the openair.com domain name redirect to the SuiteProjects Pro sign-in page, even if you have an active SuiteProjects Pro session in a different browser tab.

     For backward compatibility, service URLs with the openair.com domain name continue to be supported until further notice for API requests, BI Connector requests, WSDL, and the NetSuite integration setup for real-time record import and single sign-on.

     For more information about the change, see Introducing SuiteProjects Pro.

   • OAuth2.0 consent policy — You should select Never Ask so that the integration is autoapproved by an administrator. With other settings, users need to authorize the integration before being able to view SuiteProjects Pro within the NetSuite UI.

2. Copy the Consumer key / Client ID and Consumer secret / Client secret and store the information in a safe place. You will need to enter this information on the credentials form (Administration > NetSuite Connector > Credentials) in SuiteProjects Pro for the NetSuite as OIDC Provider integration to work (Upgrading NetSuite Integration Features to Remove the Dependency on SuiteSignOn – Step 6).

Give users access to the NetSuite as OIDC Provider integration for the SuiteProjects Pro Within NetSuite feature.

1. Go to Setup > Integration > NetSuite as OIDC Provider Setup.

2. Click the name of the custom integration record you created for the SuiteProjects Pro Within NetSuite feature (Step 4).

   The Application Settings: <Integration Name> window appears.

3. On the Entities tab and Employees subtab, check the Select All box to give all users access to the NetSuite as OIDC Provider integration for the SuiteProjects Pro Within NetSuite feature.

4. On the Roles tab, check the Select All box to give all roles access to the NetSuite as OIDC Provider integration for the SuiteProjects Pro Within NetSuite feature.

5. Click Save.

Add the Custom Record Entries permission with View permission level or higher to the relevant roles in NetSuite. Without this permission, users cannot access SuiteProjects Pro from the NetSuite UI.

For each role, do the following:

1. Go to Setup > Users/Roles > User Management > Manage Roles > [Select a role].

2. Click Edit.

3. In the Permissions subtab, click the Lists secondary subtab.

4. Add a row and select Custom Record Entries under Permission, and View under Level.

5. Click Add.

6. Click Save.

Update the preferences for the NetSuite <> SuiteProjects Pro integration.

1. Go to Customization > Lists, Records and Fields > Record Types.

2. Click List for the custom record type SuiteProjects Pro: Integration Settings.

   The SuiteProjects Pro: Integration Settings record list appears and should include one record only (SuiteProjects Pro Integration Settings Record).

3. Click Edit for the record SuiteProjects Pro Integration Settings Record.

4. In the SuiteProjects Pro Single Sign-on subtab, check any of the boxes listed in the following table to show the SuiteProjects Pro record as a subtab on the matching record in NetSuite. The table lists the integrations settings for each of the supported NetSuite record types and the corresponding types of SuiteProjects Pro record shown in the SuiteProjects Pro subtab.

   Setting	NetSuite record type	SuiteProjects Pro record type
   Display SuiteProjects Pro in Contact subtab	Contact	Contact
   Display SuiteProjects Pro in Customer subtab	Customer	Customer
   Display SuiteProjects Pro in Employee subtab	Employee	Employee
   Display SuiteProjects Pro in Expense report subtab	Expense Report	Expense Report
   Display SuiteProjects Pro in Invoice subtab	Invoice	Invoice
   Display SuiteProjects Pro in Journal entry subtab	Journal Entry	Revenue Recognition Transaction
   Display SuiteProjects Pro in Rate card subtab	SuiteProjects Pro: Project Rate Card (custom record type)	Rate Card
   Display SuiteProjects Pro in Project subtab	Project	Project
   Display SuiteProjects Pro in Item subtab	Service Item	Category

   Note:

   Some of the configuration-based customization available when using the SuiteSignOn feature is not currently available when using the NetSuite as OIDC Provider feature. You would need to deploy custom SuiteScripts to achieve the following functionality.

   • Ability to show the Timesheets module on Support Case records as a SuiteProjects Pro: Timesheets subtab in NetSuite when using the Tasks (Support Cases) Import Workflow.

   • Ability to set up custom SuiteProjects Pro subtabs on NetSuite records and displaying SuiteProjects Pro content other than those listed in the table above. With the SuiteSignOn feature, you could set up custom subtabs and use connection points to associate each custom subtab with a NetSuite record type and use integration variables to specify the SuiteProjects Pro content shown in this subtab.

5. Click Save.

If you are using your own custom role for the SuiteProjects Pro integration instead of the “SuiteProjects Pro Integration Administrator” role created by the SuiteProjects Pro SRP Integration (Bundle ID 369637) bundle, make sure that this custom role includes the Certificate management permission (Full permission level) in the Setup secondary subtab. For more information, see Creating a Custom Role for the Integration in NetSuite.

Update the SuiteProjects Pro Real-time Add-on (Bundle ID 369630) bundle to version 3.0 or later.

This bundle version:

• Updates the SuiteProjects Pro: Send to SPP 2.0 user event script to import records from NetSuite into SuiteProjects Pro in real-time using certificate-based authentication.

• Adds the custcertificate_oa_realtime certificate record. The default certificate openair-certificate.pem associated with the custcertificate_oa_realtime certificate record is not valid. It is a required placeholder that will be replaced later. See Upgrading NetSuite Integration Features to Remove the Dependency on SuiteSignOn – Step 7.

If you currently have the SuiteProjects Pro: Send to SPP user event script (SuiteScript 1.0 version) deployed for real-time record import, switch to SuiteProjects Pro: Send to SPP 2.0 (SuiteScript 2 version). See Switching to SuiteScript 2 Versions of Integration Bundle Scripts.

Update the preferences for the NetSuite <> SuiteProjects Pro integration.

1. Go to Customization > Lists, Records and Fields > Record Types.

2. Click List for the custom record type SuiteProjects Pro: Integration Settings.

   The SuiteProjects Pro: Integration Settings record list appears and should include one record only (SuiteProjects Pro Integration Settings Record).

3. Click Edit for the record SuiteProjects Pro Integration Settings Record.

4. Check the Real-time integration with SuiteProjects Pro box in the SuiteProjects Pro Real-time Add-on subtab.

5. Click Save.

In SuiteProjects Pro, go to Administration > NetSuite Connector.

Click the Tips button then click Generate new real-time import certificate. SuiteProjects Pro generates a new certificate, uploads it in the custcertificate_oa_realtime certificate record in NetSuite, and saves it in SuiteProjects Pro after it is successfully uploaded in NetSuite.