Enable Token-Based Authentication for SuiteCommerce

Token-based authentication has become a requirement in SuiteCommerce solutions to ensure compliance with Two-Factor Authentication (2FA) policies. This update, introduced in a recent NetSuite release, mandates that all developer tools, including the extension, theme, and SuiteCommerce Advanced command-line tools, utilize token-based authentication instead of traditional NetSuite user credentials.

Why Token-Based Authentication Matters

Token-based authentication improves security by ensuring that sensitive actions within SuiteCommerce are validated through secure tokens rather than reusable credentials. This approach helps protect accounts, especially for NetSuite administrators and other privileged roles.

Preparing for Token-Based Authentication

To migrate your SuiteCommerce Advanced (SCA) implementation to use token-based authentication, you'll need to follow specific patch instructions tailored for your version of SCA. Here are the major steps:

Patch Instructions by SCA Version

• For SCA Aconcagua, 2018.2, 2019.1, 2019.2, 2020.1, and 2020.2:

  • Follow the specific instructions here to enable token-based authentication.

• For SCA Montblanc, Vinson, Elbrus, and Kilimanjaro:

  • Refer to the guide here to ensure compatibility.

• For SCA Denali:

  • Check the instructions for Denali here.

Important Notes

• Ensure that the Token-Based Authentication feature is enabled in your NetSuite account before proceeding with these updates. Refer to the section Enable the Token-based Authentication Feature for guidance.
• Completing the patch instructions is just the first step; additional configurations for token-based authentication will follow. For further details, consult Token-Based Authentication Updates for Developer Tools.

Key Steps for Implementation

To implement token-based authentication effectively:

1. Modify the index.js file to incorporate the necessary changes for Gulp deployments.
2. Adjust other relevant files as specified in your patch instructions, such as tool.js and communication.js.
3. Run NPM commands to integrate the new settings and dependencies, ensuring everything is correctly configured.

Following these steps will help secure your SuiteCommerce environment and align it with best practices in authentication.

Source: This article is based on Oracle's official NetSuite documentation.