This is a very nerdy post, because I’ve been working with a lot of customers who use NetSuite.

Some nice things about NetSuite.

They support token-based authentication.

Think of it like the password needed to enter the doors of Moria (“speak friend and enter) except only one specific friend knows the code and can get through, and you can change the word anytime.

Here’s how it works.

In NetSuit you:

1. Create a dedicated integration user

2. Give it a custom role

3. Grant that role only the record permissions it needs

4. Issue it a token

That token only works for that user-and-role combo, and it can be tied to an IP allowlist (so it only works when the request comes from where you expect).

P.S. A token is how NetSuite knows which app is sending a request and who is behind it, e.g., “Walmart, sent by Susan, allowed to view POs and edit ship dates.”