This site requires JavaScript to be enabled
External Customer KB > General > Provision Users to Netsuite
Provision Users to Netsuite
Article: KB0010365 Published: 06/30/2021 Last modified: 06/30/2021

This article describes how to configure OneLogin to provision users to NetSuite.

Enable Provisioning

  1. Go to Applications > Applications, and select NetSuite.
  2. On the Configuration tab, connect to the NetSuite API.

  1. In the Provisioning Account ID field, enter your NetSuite Account ID.
  2. Enter your NetSuite administrator credentials in the API Username and API Password fields.
  3. Click Connect. If the connection is successful, the API Status icon switches to .

In the NetSuite UI, go to Setup > Company > Company Information. Locate & copy your domain on the Company's URL tab under SUITETALK (SOAP AND REST WEB SERVICES).

company apps

On the Provisioning tab, enable the provisioning option and import NetSuite entitlement values.

company apps

  1. Select the Enable provisioning for NetSuite option.
  2. Choose which provisioning actions require administrator approval. For any action you select, a OneLogin administrator must go to Users > Provisioning and manually approve each action for provisioning to complete. Clear these options if you want OneLogin to provision new users and user updates to NetSuite without administrative approval.
  3. Select what happens to a user in NetSuite when that user is deleted from OneLogin. Choose between Delete, Suspend, or Do Nothing.
  4. Click Refresh to import NetSuite entitlement values, like Role or Employee Type. Click Save.

Configure Parameters

  1. Go to the Parameters tab to map NetSuite attributes to OneLogin attributes.

    These mappings tell OneLogin how to populate user attribute values to NetSuite when provisioning users from OneLogin. You can use these parameters to create provisioning rules.

    company apps

  2. For each field that you want to include in user provisioning, click the parameter row to open the Edit Field dialog, where you can change the default OneLogin value and select the Include in User Provisioning option.

    Required fields: Password, Role, and Subsidiary are required; if they don't hold OneLogin values for a user, that user will fail to be provisioned to NetSuite. For each of these fields, you must open the Edit Field dialog and select Include in User Provisioning. You must also ensure that these fields hold values in the user's login record.

    Custom fields: To provision the Hire Date and Employee ID fields, you must create custom OneLogin fields to hold these values. For more information, see Provisioning Custom User Fields.

    Note: Some legacy Netsuite applications are required to define the datacenter URLs. If this matches your use case, add WSDL and WSDL Domain as Parameters, then configure them as follows:

WSDL DOMAIN: https://[ACCOUNT-ID].app.netsuite.com

WSDL: https://[ACCOUNT-ID].suitetalk.api.netsuite.com/wsdl/v2018_2_0/netsuite.wsdl

Click Save when you are done editing field - value mappings.

Configure Provisioning Rules

  1. Select the Rules tab to create and configure a NetSuite Rule Mapping.
    1. Click New Rule to bring up the New Mapping pane.
    2. Name your new Mapping.
    3. Set the Action for your mapping and the Conditions that will trigger it. In this example, when Conditions = DistinguishedName > equals > Josh Ames, Perform these actions = Set Roles >Administrator, it’s saying that ‘If provisioning encounters a User named Josh Ames, assign him into the NetSuite Role of ‘Administrator’. 
    4. Click Show Affected Users to makes sure that the mapping will affect the desired users.
    5. Click Save.
  2. Go to the More Actions menu and select Reapply provisioning mappings. Do this every time you create or update a mapping to ensure that the most recent mappings are being applied to your users.

Provision Custom User Fields

The parameters Hire Date and Employee ID allow you to map OneLogin custom user fields holding hire date and employee ID values to the NetSuite Hire Date and Employee ID fields, enabling those values to be included when you provision users to NetSuite.

Important! In order to use these parameters, your account must support Custom User Fields.

To set up provisioning to include hire date:

  1. Log into your OneLogin account as an administrator.
  2. Go to Users > Users.
  3. In the More Actions menu, select Custom User Fields and click New User Field.
    1. Name your custom field, and then provide a Shortname.

      For this example, Hire Date and dateOfhire were used. Click Save.

      company apps

  4. Go to Users > Users and select the user or users you wish to confirm Hire Date for.
    1. Under your custom Hire Date field, enter the timestamp format of: YYYY-MM-DDTHH:MM:SS+Z

      You may use any numbers, as long as they are in this format, as they will be overwritten by the timestamp from AD. If left empty, the timestamp will default to today's date in the GMT timezone.
    2. Click Save.
  5. Go to Apps > Apps > NetSuite, and select the Parameters tab.
    1. Click the Value associated with the Hire Date Field, and choose your Hire Date custom attribute.

  6. Click Save.

Users are provisioned into NetSuite with a Hire Date.

To set up provisioning to include Employee ID:

  1. Log into your OneLogin account as an administrator.
  2. Go to Users > Users.
  3. In the More Actions menu, select Custom User Fields and click New User Field.
    1. Name your custom field, and then provide a Shortname.

      For this example, Employee Id and emplId were used. Click Save.

  4. Go to Apps > Apps > NetSuite, and select the Parameters tab.
  5. Click the Employee ID row to open the Edit Field Employee ID dialog, and select the custom field (in our example, Employee ID) as your OneLogin Value.
  6. Enter the Employee IDs for the users you want to provision to NetSuite.

    If you store Employee IDs in Active Directory, you can map the AD attribute to the custom field that you created for Employee IDs.

    Alternatively, you can enter Employee IDs directly in the OneLogin user record for each employee you want to provision to NetSuite:


    1. Go to Users > Users and select a user.
    2. Enter the user's employee ID in the custom field (in this example, Employee ID).

Users will be provisioned into NetSuite with an Employee ID.

Test Provisioning

To confirm that provisioning from OneLogin to NetSuite is working, add a user to OneLogin, give that user access to the NetSuite app in OneLogin, and go to Users > Provisioning to approve the provisioning event, if necessary. When the user is marked as Provisioned, go to NetSuite and confirm that the new user has been added.



Expand/Collapse Comments
:     
Was this helpful?
YesYesNoNo