Single Sign-on Integration with External Websites

This topic applies to

Applies to

SuiteCommerce | SuiteCommerce Advanced


Inbound Single-Sign on (SSO) allows your web store users to log in to an external application and then move to a NetSuite web store without needing to log in again. Outbound SSO enables users to access an external application from your web store.

You can use either of the following methods to implement inbound SSO for your NetSuite web store:

  • SAML SSO – This method uses authentication from a third-party identity provider. For more information, see SAML Single Sign-on Access to Web Store.

  • OpenID Connect (OIDC) – This method is an alternative to SAML SSO. It uses authentication from a third-party OIDC Connect Provider (OP). For more information, see OpenID Connect (OIDC) Access to Web Store.

  • Inbound SSO – This method uses an encrypted token, and a dynamically constructed URL to redirect users from the external site to a NetSuite landing page. For more information, see Inbound Single Sign-on Access to Web Store.


    This NetSuite proprietary Inbound SSO feature is targeted for deprecation. The deprecation schedule is as follows:

    • Targeted to occur as of the 2020.1 upgrade, customers will no longer be permitted to use this Inbound SSO feature to create new solutions.

    • Targeted to occur before the 2021.1 release, customers should migrate their existing solutions to use a different single sign-on solution. See the help topics SAML Single Sign-on and SAML Single Sign-on Access to Web Store.

Outbound Single Sign-on is available using the SuiteSignOn feature. For more information, see Outbound Single Sign-on (SuiteSignOn) Access from Your Web Store.