Setting Up Two-Factor Authentication (2FA)

Important:

To reduce the risk of unauthorized access to your NetSuite account, which could result in processing unauthorized transactions, it is recommended that you limit your Idle Session Timeout to 60 minutes. This means that you will be required to log back in if your NetSuite UI is inactive for over 60 minutes. For more information, please see User Interface (UI) Sessions.

When using Payment Automation, use two-factor authentication (2FA) with the device trusted duration set to Per session. The following default roles that are provided with Payment Automation have 2FA enabled Per session by default:

AP Payment Clerk
AP Payment Manager
Vendor Master Clerk
Vendor Master Approver

If you do not have 2FA enabled with the device trusted duration set to Per session on your NetSuite role, access to the following features and pages is restricted:

Auto-funding setup
Money transfer
Vendor record
Bill payments
Creating and editing a vendor bank account
Generating payment tokens
Bulk Bill Payments page

In a multi-subsidiary setup, all users need to enable 2FA who want to initiate payments from the newly created subsidiary.

If you are using a custom role, you must enable 2FA for that role, and set the device trusted duration to Per session. For instructions, see Set up Your Preferences for Two-Factor Authentication (2FA).

You should always log into NetSuite with 2FA when you use Payment Automation.

Related Topics