Website Access Restrictions for SuiteCommerce

Website access restrictions enable you to manage who can view your SuiteCommerce site, offering both security and tailored user experiences. This capability is crucial in environments where only logged-in users should be granted access, particularly in B2B scenarios.

How to Restrict Access to Your Website

You can restrict your entire website to logged-in users. When this restriction is enabled, only registered and logged-in users can view the site's content. You can set up your site to automatically redirect unauthenticated visitors to a login page with an option for registration.

To restrict access:

1. Go to Commerce > Websites > Website List.
2. Click Edit next to the website you wish to restrict.
3. Navigate to the Shopping tab and locate the Registration Page area.
4. Check the Password-protect Entire Site box.
5. Choose an option from the Type of Customer Registration list:
   • Existing Customers Only: Restricts access to customers with login credentials for checkout processes, available only with the Advanced Site Customization feature.
   • Required: Restricts access to registered customers; new customers must register, creating a record in NetSuite even if they do not complete the checkout.

Important Considerations

• The optional and disabled site registration settings are not available if the site is password-protected.
• Users still have some visibility if they know the URL that calls the CXM API.
• After a user session ends, any attempt to use the Quick View link redirects to the Checkout page instead of the Login page.
• If users switch languages on a password-protected site, they will need to log in again due to session timeout.

Pre-Vinson SCA Restrictions

For users operating a pre-Vinson version of SuiteCommerce Advanced (SCA), here’s the procedure to follow:

1. Follow the initial steps outlined above for navigating to your website’s settings and editing the registration options.
2. Ensure to create a custom module that includes the backend Configuration object as a dependency.
3. Set the passwordProtectedSite property to true within your custom module and deploy the changes to your site.

Setting Public URLs

Even if your site is password-protected, you can ensure specific URLs remain publicly accessible. This feature allows segments of your website, like a blog or informational pages, to be reached without login requirements, enhancing user experience.

Key Takeaways

• Restricting access to your site enhances security by ensuring only registered users can view content.
• You can customize access through various customer registration workflows, fitting diverse business needs.
• Be aware of the limitations regarding how users can navigate after session expiration.

Source: This article is based on Oracle's official NetSuite documentation.