SAML SSO Permissions

When the SAML Single Sign-on feature is enabled, the following permissions are available:

Set Up SAML Single Sign-on - permits users other than administrators to view and edit the SAML Setup page. (The Administrator role already has this permission.)
SAML Single Sign-on - requires users to log in to the NetSuite UI using SAML SSO. This permission must be explicitly assigned to a role. A user logging in with a role with this permission will not be able to log in to the NetSuite UI from the standard login page with their username and password.

Important:
No special permission is required to grant a customer center role SAML SSO access to a website. After the SAML setup for a website is completed, the SAML permission is automatically enabled for all customer center users.

For more information, see SAML Single Sign-on Access to Web Store

Both of these permissions are Setup type permissions that support only a Full level.

You can add the SAML Single Sign-on permission to an existing role, or you can create a new role.

Important:

You cannot add SAML Single Sign-on permission to a role that has SuiteAnalytics Connect permission.

Permissions are added to roles on the Role record page, available at Setup > Users/Roles > Manage Roles.

SAML Single Sign-on permission added on the Setup subtab.

Important:

After the SAML Single Sign-on permission has been assigned to a role, there is a small delay before a user can use this role to log in using SAML single sign-on. This delay is related to caching; the new permission is not available until after the cache has timed out.

For more information about adding permissions to roles, see Customizing or Creating NetSuite Roles.

Related Topics