## NetSuite integration

NetSuite is Oracle's cloud ERP suite for finance, operations, and CRM. Integrating NetSuite with Frontegg lets your application read and write NetSuite records and run SuiteQL queries through the SuiteTalk REST Web Services API on behalf of your users — all through Frontegg's integration layer. NetSuite authenticates with OAuth 2.0 (Authorization Code flow), so you create an integration record in NetSuite to obtain a Client ID and Client Secret. Because NetSuite endpoints are per-account, you also provide your **NetSuite Account ID**.

Prerequisites
- A [NetSuite](https://www.netsuite.com/) account with administrator access
- The **REST Web Services** and **OAuth 2.0** features enabled (see Step 1)


### Connect to NetSuite

You create an integration record in NetSuite. It provides the **Client ID** (Consumer Key) and **Client Secret** (Consumer Secret) and defines the **redirect URI** that NetSuite returns users to after they authorize access. You also need your **Account ID**.

#### Step 1: Enable the required features

Sign in to NetSuite as an administrator and go to **Setup → Company → Enable Features**. On the **SuiteCloud** tab, enable **REST Web Services** and, under **Manage Authentication**, **OAuth 2.0**. Save.

#### Step 2: Create an integration record

Go to **Setup → Integration → Manage Integrations → New**. Enter a **Name** (for example, `Frontegg Integration`) and set **State** to **Enabled**.

#### Step 3: Configure OAuth 2.0

In the integration record, under **OAuth 2.0**:

- Enable **Authorization Code Grant**.
- Enable the **REST Web Services** scope.
- Set the **Redirect URI** to your Frontegg Redirect URL: `https://YOUR_MCP_GATEWAY_URL/integration-callback`


Make sure the Token-Based Authentication options are not required for this app — only OAuth 2.0 is needed.

#### Step 4: Copy the Client ID and Client Secret

Click **Save**. NetSuite displays the **Client ID** (Consumer Key) and **Client Secret** (Consumer Secret) on the confirmation page.

Copy your credentials now
The Client ID and Client Secret are shown only once, right after you save the integration record. Copy them immediately and store them securely — treat them like a password. If you lose them, reset the credentials on the integration record to generate new ones.

#### Step 5: Find your Account ID

Your **Account ID** appears in your NetSuite URL (for example, `1234567` in `1234567.app.netsuite.com`) and in **Setup → Company → Company Information**. Use lowercase, replace any underscore with a hyphen, and append the environment suffix for non-production accounts (for example, `1234567-sb1` for a sandbox). Do not include `https://` or `.suitetalk.api.netsuite.com`.

### Configure the Frontegg portal

Once you have your **Client ID**, **Client Secret**, and **Account ID**, configure the integration in the Frontegg portal:

1. Open the **Frontegg portal** and navigate to [ENVIRONMENT] → Integrations → NetSuite.
2. Enter the **Client ID** and the **Client Secret**.
3. Enter your **NetSuite Account ID** (for example, `1234567`).
4. Click **Save**.


Frontegg requests the following scope during authorization:

| Scope | Description |
|  --- | --- |
| `rest_webservices` | Access NetSuite records and run SuiteQL queries via SuiteTalk REST Web Services |


Keep your credentials secure
Never share or commit your Client Secret to version control.

### Additional resources

- [SuiteTalk REST Web Services documentation](https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/chapter_1540391670.html)
- [OAuth 2.0 for REST Web Services (NetSuite)](https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_158074210415.html)
- [How to get your Redirect URL](/agen-for-work/connectors/redirect-url)