Single Sign-on Integration for NetSuite Web Stores

Single Sign-on (SSO) integration allows users of your NetSuite web store to access external applications without needing to log in again. This integration can significantly enhance user experience by simplifying authentication processes. There are two primary methods to set up inbound SSO for your NetSuite web store: SAML SSO and OpenID Connect (OIDC).

What is Inbound Single Sign-on?

Inbound SSO enables users who have logged in to an external application to automatically gain access to your NetSuite web store. This reduces friction for users as they do not need to enter their credentials multiple times.

How Does SAML SSO Work?

SAML SSO utilizes a third-party identity provider (IdP) for user authentication. When users authenticate via the IdP, they can access your NetSuite web store without additional login steps. It is essential to configure this correctly, as it requires specific settings in your NetSuite account:

1. Ensure your website is set to custom domains, as SAML SSO is not supported on netsuite.com.
2. Users must log in through the IdP.
3. Set up a landing page in NetSuite to redirect users after authentication.

Important Considerations:

• You must choose either SAML or OIDC for your site as both cannot be enabled simultaneously.
• Read the relevant SAML documentation to properly configure your setup.

How to Set Up OpenID Connect (OIDC)?

OIDC serves as an alternative to SAML SSO. With OIDC, user authentication is managed through an OpenID Connect provider (OP), offering more control over security administration.

OIDC Setup Steps:

• Similar to SAML, OIDC requires your web presence to be set up on custom domains.
• Ensure that all users log in using the same credential type, whether through the website form or the OP login form.
• It is necessary to password-protect the entire site to support OIDC effectively.

What Changes Were Made?

Starting in the 2025.1 release, NetSuite has discontinued support for the outbound SSO method (SuiteSignOn). Users needing this functionality should utilize the NetSuite as OIDC Provider feature for outbound access.

Who This Affects

The following roles may find this integration relevant:

• Administrators: Responsible for setting up the identity provider configurations.
• Developers: Need to understand SSO flow for customizing user experiences.
• Web Store Managers: Oversee the customers' login experience in the web store.

Key Takeaways

• Employ SAML SSO or OpenID Connect for seamless web store user access.
• Configurations differ based on whether you choose SAML or OIDC; choose one method per site.
• Discontinuation of outbound SSO means adapting to OIDC for external app access.
• Pay close attention to documentation for correct SSO implementation to prevent access issues.