Permissions for Inbound Single Sign-on Methods
The correct permission to assign to a role for single sign-on (SSO) inbound access to NetSuite depends on the SSO feature enabled in your account.
OpenID Connect (OIDC) Single Sign-on Permission
OpenID Connect (OIDC) Single Sign-on is an inbound single sign-on (SSO) method to access NetSuite. OIDC is an identity layer on top of the OAuth 2.0 protocol. OIDC uses JavaScript Object Notation (JSON) as the data format, and uses JSON Web Tokens (JWT) to transfer claims between parties.
If the OIDC configuration is shared between different NetSuite accounts, users can switch between OpenID Connect (OIDC) Single Sign-on roles without requiring a separate login. User credentials and policies are managed by the OIDC provider (OP). NetSuite is the client, or relying party (RP).
When this feature is enabled, you can provide OIDC SSO access to your account users by assigning the OIDC Single Sign-on permission to their roles.
See Customize Roles for OpenID Connect and OpenID Connect Permissions for more information about the OpenID Connect (OIDC) Single Sign-on permission and granting OIDC access to center roles.
For more information about the OIDC feature in NetSuite, see OpenID Connect (OIDC) Single Sign-on.
SAML Single Sign-on Permission
The SAML Single Sign-on feature supports inbound single sign-on access to NetSuite using authentication from a third-party identity provider. This feature allows users who have logged in to an external application to go directly to NetSuite. Users do not need to log in separately to NetSuite, because authentication from the same identity provider is used for login to both the external application and NetSuite.
When this feature is enabled, you can provide SAML Single Sign-on access to your account users by assigning the SAML Single Sign-on permission to their roles.
See Add SAML Single Sign-on Permissions to Roles for more information about the SAML Single Sign-on permission, granting SAML access to center roles, and limitations and restrictions that apply to SAML permissions.
For more information about the SAML feature in NetSuite, see SAML Single Sign-on.
Related Topics
- NetSuite Permissions Overview
- Permissions and Restrictions
- Reviewing Permissions Assigned to Roles
- Access Levels for Permissions
- Permissions Documentation
- Core Administration Permissions
- Feature Permissions Documentation
- Using the Global Permissions Feature
- Giving Access to the Transactions Subtab on Entity Records
- Giving Access to Financial Statements
- Hiding Employee Information on Financial Reports
- Setting Permissions for Custom Records