OAuth 2.0 Client Credentials Setup

Note:

The client credentials flow setup in your NetSuite production account isn't copied to any other production account, Release Preview account, or sandbox account. Users must set up the flow explicitly in each account, to test the OAuth 2.0 client credentials flow in these accounts. Each time a sandbox account is refreshed, the setup gets cleared.

An administrator, or a user assigned a role with the OAuth 2.0 Authorized Applications Management permission, can create or revoke a mapping for the OAuth 2.0 client credentials flow.

Creating the mapping is a required step for the OAuth 2.0 client credentials flow to work.

Creating a Mapping for the Client Credentials Flow

See the following procedure for steps to create a new mapping for the OAuth 2.0 client credentials flow.

To create a mapping for the client credentials flow:

  1. Go to Setup > Integration > Manage Authentication > OAuth 2.0 Client Credentials (M2M) Setup.

    The OAuth 2.0 Client Credentials Setup page appears.

  2. To create a new mapping, click the Create New button.

  3. In the popup window, choose the entity, role, and application to be mapped. Upload the public part of the certificate from your computer.

    Note:

    The application is only available to be selected if the Client Credentials (Machine to Machine) Grant box is checked on the associated integration record. For more information, see Create Integration Records for Applications to Use OAuth 2.0.

  4. Click Save.

The mapping is added to the list on the OAuth 2.0 Client Credentials (M2M) Setup page. The list includes the data you entered, as well as the data imported from the certificate. The system creates a record for every unique combination of application and certificate.

To revoke a certificate, click the Revoke button in the Revoked column.

If you revoke a certificate or the certificate expires, you must create a new mapping for the integration record to continue using the OAuth 2.0 client credentials flow. The revoked certificate can't be reused in a different integration.

Related Topics

General Notices