Punchout - Generating Punchout Access Tokens for NetSuite

The following method can be used to generate a Punchout access token for NetSuite. This is required if inbound notifications such as Order Confirmations, Advance Shipping Notifications or Invoices are being setup. 

NetSuite requires that all inbound integrations are tied to a specific NetSuite licensed user record. You are free to either set this up using an existing user OR create a dedicated integration user if you have sufficient NetSuite licenses. If the access for that user is disabled at a later date, the inbound notifications will stop working. 

Another consideration is that whenever updates such as order confirmation numbers are set in NetSuite, the “Modified By” field on the transaction (or “Created By“ in the case of invoices) will show the name of the user which the integration token was generated under. 

A final consideration is that the user selected will need to have a role which allows for unrestricted access to update the concerned transaction types (POs or Invoices). If needed, a dedicated web-services role can be setup but this is not required. 

Generating an Access Tokens

There are two methods of generating access tokens and the one used will depend on the user role. If the user has access to generate tokens and they need to generate the token under their own name, they should use Method 1. If the user such as an admin needs to create the token under another user’s login then they should use Method 2. 

Method 1 - Create User Access Token for Own Login

1 - In the Settings portlet on the home page dashboard, click the Manage Access Tokens link.

{Insert screenshot}

2 - The My Access Tokens page displays, listing all the tokens for the current user in the current role.

View full size

3 - Click New My Access Token. The Access Token page displays. 

4 - On the Access Token page:

• Select the Application Name. Make sure to select the correct “Punchout for NetSuite (SuiteApp)” application. 

• The Token Name is already populated by default with a concatenation of Application Name, User, and Role. Enter your own name for this token, if desired.

View full size

5 - Click Save.

• The confirmation page displays the Token ID and Token Secret. Note: For security reasons, the only time the Token ID and Token Secret values are displayed is on the confirmation page. After you leave this page, these values cannot be retrieved from the system.

View full size