Skip to main content

Preparation

Before you can target Oracle NetSuite, you must:

  1. Set up NetSuite OAuth 2.0 authentication

  2. Install Python dependencies

  3. Configure the target system in Bravura Security Fabric.

Set up NetSuite OAuth 2.0 authentication

Create an integration record

You must create an integration record in NetSuite to enable OAuth 2.0 authentication:

  1. Navigate to Setup > Integration > Manage Integrations > New.

  2. Configure the integration:

    • Name: Bravura Security Fabric Integration

    • State: Enabled

    • OAuth 2.0: Checked

    • Authorization Code Grant: Unchecked

    • Client Credentials Grant: Checked

    • Scope: Select REST WEB SERVICES

  3. Save and note the Client ID and Client Secret.

Create service account

Create a dedicated service account in NetSuite with appropriate permissions:

  1. Navigate to Lists > Employees > Employees > New.

  2. Configure the employee:

    • Name: Bravura Service Account

    • Email: bravura-service@<yourdomain.com>

    • Give Access: Checked

    • Role: Administrator

  3. Save the employee record.

Generate and upload OAuth certificates

Generate a public/private key pair for OAuth 2.0 authentication:

Option 1: Standard RSA Certificate (Recommended)

# Generate private key
openssl genrsa -out netsuite_private.pem 4096

# Generate public certificate (valid for 1 year)
openssl req -new -x509 -key netsuite_private.pem -out netsuite_public.pem -days 365       

Option 2: RSA Certificate with PSS Padding

# Generate private key and certificate in one command with PSS padding (valid for 1 year)
openssl req -new -x509 -newkey rsa:4096 -keyout netsuite_private.pem \
  -sigopt rsa_padding_mode:pss -sha256 -sigopt rsa_pss_saltlen:64 \
  -out netsuite_public.pem -nodes -days 365

Note

Both options work with NetSuite and create certificates valid for 1 year (365 days). Option 1 is simpler and uses standard RSA signatures. Option 2 uses PSS (Probabilistic Signature Scheme) padding, which provides additional security properties. Choose the option that matches your organization's security requirements.

Upload the certificate to NetSuite:

  1. In NetSuite, navigate to Setup > Integration > OAuth 2.0 Client Credentials (M2M) Setup.

  2. Click Create New.

  3. Configure the OAuth 2.0 Client Credentials:

    • APPLICATION: Select your integration (Bravura Security Fabric Integration).

    • ENTITY (USER): Select the service account (Bravura Service Account).

    • ROLE: Select the role assigned to the service account (Administrator).

    • CERTIFICATE: Click Choose File and upload netsuite_public.pem.

  4. Click Save.

  5. Note the CERTIFICATE ID that NetSuite assigns (displayed in the list after saving).

Important

Keep the private key file (netsuite_private.pem) secure and accessible to Bravura Security Fabric. You will need to specify its full path in the Bravura address attributes.