This topic describes how to configure OneLogin to provide SSO for NetSuite using SAML.

NetSuite Administration Panel

1. Log into NetSuite as an administrator.
2. Create a test role and assign a test user to it or copy an existing role with users who will be test subjects, ensuring that your users have accounts in OneLogin.
3. Navigate to Setup > Company > Enable Features and select SuiteCloud on the Enable Features version near the bottom right.

4. Scroll to the Manage Authentication section and check SAML Single Sign On, making sure Token-Based Authentication is selected.

5. Navigate to Setup > Manage Roles, then create and name a new role.

   

6. Navigate to the permissions section and click Edit, then select the Setup dropdown near the top of the page and add SAML Single Sign On, ensuring that your user has Full Level access. Click Save.

   Optional: if the option to Set Up SAML Single Sign On is available, use it.

   Optional: create one or more additional test users to experiment with different setups.

7. Navigate to the top bar and click Set Up > Integration > SAML Single Sign and set it to On. The SAML setup page appears.

8. Copy the SLO Endpoint (HTTP) from the SAML Single Sign-on page and paste it somewhere safe.
   Note: the Set up Identity Provider value will be generated by OneLogin in the second half of this document. You'll return to complete it.
9. Navigate to Set Up > Company > Company Information and copy the Account ID Number and Customer Center Login. Paste them somewhere safe.

OneLogin

Log into your OneLogin account as an administrator.

1. Navigate to Applications > Applications > Find Application, then search for NetSuite and choose it.

2. Change your organization's Netsuite information if you wish, then click Save.

3. Use the Account ID Number you copied earlier as your Account ID on the Configuration tab. 

4. Navigate to Parameters and ensure that the User ID in OneLogin matches the User ID in NetSuite, which it should by default. If it doesn't, click on it and edit the field User ID.

5. Navigate to the SSO tab and click the More Actions dropdown, then click SAML Metadata to download a file containing a value you'll need in the NetSuite administration panel.

6. Navigate to the Access tab and ensure that the Role that needs access to NetSuite is enabled. Note: all SSO enabled roles must be custom roles. Default NetSuite roles do not allow SSO permissions to be added.

7. Return to the NetSuite administration panel and paste the entire metadata file contents into the Set up Identity Provider value.
8. Log into the test user account you created earlier and ensure that the OneLogin > NetSuite connection has been made.