SAML Single Sign-on Setup Steps in NetSuite

To get started with SAML Single Sign-on (SSO), some preliminary setup steps must be completed in your NetSuite account. This process is vital for ensuring secure access management through SAML integration with identity providers (IdPs).

How to Enable the SAML Single Sign-on Feature

To enable the SAML Single Sign-on feature, follow these steps:

1. Navigate to Setup > Company > Setup Tasks > Enable Features and click the SuiteCloud subtab.
2. In the Manage Authentication section, check the SAML Single Sign-on box. Agree to the SuiteCloud Terms of Service when prompted.
3. Click Save.

Warning: By enabling the SAML Single Sign-on feature, users can access your NetSuite account through third-party services, which may have different authentication and security protocols. It’s crucial that your implementation complies with any relevant security standards, including PCI Data Security Standards.

How to Add SAML SSO Permissions to Roles

You can customize roles in NetSuite to include permissions for SAML SSO. This enables existing roles to facilitate SSO for users who require it. Here’s how:

1. Go to Setup > Users/Roles > User Management > Manage Roles.
2. Select the role to customize and click Customize.
3. Renaming the role to reflect SAML usage is recommended for clarity.
4. Click the Permissions subtab and select the respective SAML permission from the Setup subtab.
5. Click Add to assign the necessary SAML permissions to the role.
6. Click Save after adding the required permissions.

Important Notes on SAML Permissions

• If a role is set to require two-factor authentication (2FA) and SAML SSO is added, the 2FA requirement will be bypassed, as SAML permissions take precedence.
• Review the SAML SSO Permissions documentation for detailed information on the specific permissions applicable in this context.

By following these steps, administrators can effectively prepare their NetSuite account and roles for secure SAML Single Sign-on access, ensuring users can authenticate seamlessly through their chosen identity providers.

Source: This article is based on Oracle's official NetSuite documentation.

Key Takeaways

• Enabling SAML Single Sign-on allows third-party access through an identity provider.
• Roles must be customized to include SAML SSO permissions for users.
• Compliance with security standards is crucial when implementing SSO.