Notifications
Announcements
Authorization: OAuth …
Use account-specific domains. Call the account URL (e.g., https://<ACCOUNT>.suitetalk.api.netsuite.com/... or https://<ACCOUNT>.restlets.api.netsuite.com/...). Generic *.netsuite.com hosts can fail auth. https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_1546938065.html https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_1498251763.html
https://<ACCOUNT>.suitetalk.api.netsuite.com/...
https://<ACCOUNT>.restlets.api.netsuite.com/...
*.netsuite.com
Build the OAuth 1.0a header exactly as NetSuite expects.
Signature method: HMAC-SHA256 (SHA-1 is no longer supported).
Percent-encode per RFC 5849; mis-encoding → INVALID_LOGIN_ATTEMPT.
INVALID_LOGIN_ATTEMPT
Include oauth_realm="<ACCOUNT_ID>" and ensure nonce/timestamp are unique and current (seconds).
oauth_realm="<ACCOUNT_ID>"
Base string = METHOD & base URL & normalized params (incl. query params). NetSuite shows the required header format & encoding rules.
METHOD & base URL & normalized params
Generate the header outside the flow, then call NetSuite. Use a tiny Azure Function/Logic App to output the signed header (Node’s oauth-1.0a, PowerShell, etc.). In your flow:
oauth-1.0a
Step A: HTTP → your function → returns the Authorization string.
Authorization
Step B: HTTP → NetSuite endpoint, add Authorization header = output from Step A. Example repo doing exactly this for Power Automate: Azure Functions OAuth 1.0 Authorization Header Generator. https://github.com/elliott-liu/azure-functions-oauth-1.0?
Role & TBA checks (common cause of “Invalid Login”). Ensure TBA is enabled and the token’s role has Log in using Access Tokens, User Access Tokens, and the correct Web Services / RESTlet permissions.
Postman parity tips (if Postman works but Flow fails): Match Postman’s advanced options like “Encode parameters in Authorization header” and (when required) “Add empty parameters to signature.” These affect the signed base string.
Under review
Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.
In our never-ending quest to improve we are simplifying the forum hierarchy…
We are honored to recognize Ajay Kumar Gannamaneni as our Community Spotlight for December…
These are the community rock stars!
Stay up to date on forum activity by subscribing.
Michael E. Gernaey 501 Super User 2025 Season 2
Tomac 323 Moderator
abm abm 237 Most Valuable Professional