Login Notification Setup for Compliance in NetSuite 2026.1

Starting in NetSuite 2026.1, administrators can establish login notifications within their accounts to support compliance requirements, and NetSuite 2026.2 adds passwordless authentication with passkeys for all users. These additions are particularly significant for organizations looking to strengthen security controls and meet NIST compliance standards.

What is Login Notification?

Login notifications are compliance messages that are displayed to all users upon login. Prior to accessing their accounts, users must acknowledge this message. This is a crucial step in ensuring that users are aware of compliance requirements, thus enhancing security protocols within the system.

Key Features

• Role Specificity: Only users with the Administrator role have the ability to set up login notifications.
• User Acknowledgment Tracking: Administrators can monitor when users acknowledge the compliance message, along with the date and time of acknowledgment, via the Login Audit Trail. This feature is useful for compliance reporting and audits.
• Passwordless Login: Starting in NetSuite 2026.2, all users can set up passkeys to sign in to their NetSuite account without entering a password. Passkeys can be physical or digital, such as a fingerprint or face ID.
• Passkey Support for 2FA: Users with FIDO2-compliant passkeys can use a passkey as a second authentication factor during login, unless an administrator disables this capability. NetSuite still prompts users for a code from an authenticator app every three months to confirm that a backup 2FA method remains available.

Use Cases

• Compliance Enforcement: Organizations in regulated industries can utilize this feature to ensure employees are aware of compliance standards during login.
• Enhanced User Awareness: By prompting users with a compliance message, organizations foster a culture of security awareness among employees.
• Stronger Authentication: Organizations can combine login notifications with passkeys to reinforce security awareness while reducing reliance on passwords during account login.

How to Set Up Login Notifications

1. Navigate to the account settings as an Administrator.
2. Locate the option for setting up login notifications.
3. Compose the compliance message you wish users to see.
4. Save your changes and test the login notification by logging out and back in.

Managing Passkeys

Starting in NetSuite 2026.2, users can manage passkeys from the Settings portlet on the Home page:

1. Locate the Settings portlet.
2. Click Manage Passkeys.
3. On the Passkeys page, create, edit, or delete passkeys as needed.

Use FIDO-certified passkeys, and consider selecting passkeys that comply with the FIDO2 specification to support 2FA use. Users must still retain their NetSuite password because passkeys are limited to account login; a password is still required for other processes, such as a 2FA reset.

Best Practices

• Regular Updates: Ensure the compliance message is regularly updated to reflect current regulations and standards.
• Training: Consider providing training to employees on the importance of compliance messages and how to handle them upon login.
• Use Certified Passkeys: Encourage users to create FIDO-certified passkeys and retain access to an authenticator app as a backup for 2FA.

Who This Affects

• Administrators: Responsible for setting up and managing login notifications and can disable passkey use as a 2FA authenticator.
• All Users: Every user who logs into the system will encounter the compliance message and can set up a passkey for passwordless account login.

Key Takeaways

• NetSuite 2026.1 introduces login notifications for compliance awareness.
• Administrators can track user acknowledgment through the Login Audit Trail.
• Starting in NetSuite 2026.2, users can use passkeys for passwordless account login and, with a FIDO2-compliant passkey, as a 2FA authenticator when enabled by an administrator.
• This feature supports organizations in meeting NIST compliance standards effectively.