Preparation
Before you can target Oracle NetSuite, you must:
Set up NetSuite OAuth 2.0 authentication
Install Python dependencies
Configure the target system in Bravura Security Fabric.
Set up NetSuite OAuth 2.0 authentication
Create an integration record
You must create an integration record in NetSuite to enable OAuth 2.0 authentication:
Navigate to Setup > Integration > Manage Integrations > New.
Configure the integration:
Name:
Bravura Security Fabric IntegrationState: Enabled
OAuth 2.0: Checked
Authorization Code Grant: Unchecked
Client Credentials Grant: Checked
Scope: Select
REST WEB SERVICES
Save and note the Client ID and Client Secret.
Create service account
Create a dedicated service account in NetSuite with appropriate permissions:
Navigate to Lists > Employees > Employees > New.
Configure the employee:
Name:
Bravura Service AccountEmail:
bravura-service@<yourdomain.com>Give Access: Checked
Role:
Administrator
Save the employee record.
Generate and upload OAuth certificates
Generate a public/private key pair for OAuth 2.0 authentication:
Option 1: Standard RSA Certificate (Recommended)
# Generate private key openssl genrsa -out netsuite_private.pem 4096 # Generate public certificate (valid for 1 year) openssl req -new -x509 -key netsuite_private.pem -out netsuite_public.pem -days 365
Option 2: RSA Certificate with PSS Padding
# Generate private key and certificate in one command with PSS padding (valid for 1 year) openssl req -new -x509 -newkey rsa:4096 -keyout netsuite_private.pem \ -sigopt rsa_padding_mode:pss -sha256 -sigopt rsa_pss_saltlen:64 \ -out netsuite_public.pem -nodes -days 365
Note
Both options work with NetSuite and create certificates valid for 1 year (365 days). Option 1 is simpler and uses standard RSA signatures. Option 2 uses PSS (Probabilistic Signature Scheme) padding, which provides additional security properties. Choose the option that matches your organization's security requirements.
Upload the certificate to NetSuite:
In NetSuite, navigate to Setup > Integration > OAuth 2.0 Client Credentials (M2M) Setup.
Click Create New.
Configure the OAuth 2.0 Client Credentials:
APPLICATION: Select your integration (Bravura Security Fabric Integration).
ENTITY (USER): Select the service account (Bravura Service Account).
ROLE: Select the role assigned to the service account (Administrator).
CERTIFICATE: Click Choose File and
upload netsuite_public.pem.
Click Save.
Note the
CERTIFICATE IDthat NetSuite assigns (displayed in the list after saving).
Important
Keep the private key file (netsuite_private.pem) secure and accessible to Bravura Security Fabric. You will need to specify its full path in the Bravura address attributes.