Connectors

Connect NetSuite with Boomi (SOAP): Token-Based Authentication Step by Step

  • Chirag Kumar DeoChirag Kumar Deo
  • 10 Oct 2026
Boomi and Oracle NetSuite connected over SuiteTalk SOAP with token-based authentication

The Boomi NetSuite connector talks to NetSuite through SuiteTalk SOAP web services. It is the most widely used way to connect NetSuite to Boomi: it imports NetSuite record types as profiles and supports query, get, create, update, upsert, delete and saved searches.

NetSuite has moved away from logging in with a user’s email and password for integrations. Boomi’s documentation notes that user-credential login is deprecated in favour of token-based authentication (TBA), so that is what we set up here.

The five NetSuite steps that produce the account ID and four keys Boomi needs.
The five NetSuite steps that produce the account ID and four keys Boomi needs.

Part 1: prepare NetSuite

You need administrator access for these steps.

  1. Enable the features. Go to Setup → Company → Enable Features → SuiteCloud and enable SOAP Web Services and Token-Based Authentication.
  2. Create an integration record. Go to Setup → Integration → Manage Integrations → New, name it (for example Boomi), tick Token-Based Authentication and save. NetSuite shows the Consumer Key and Consumer Secret once, so copy them now.
  3. Create a role for the integration with the permissions it needs: Log in using Access Tokens, SOAP Web Services, and access to the specific records (customers, sales orders and so on). Keep it to the least privilege required.
  4. Assign the role to the integration user.
  5. Create an access token. Under Setup → Users/Roles → Access Tokens → New, choose the integration record, the user and the role. NetSuite shows the Token ID and Token Secret once; copy them.

Watch out: Treat the consumer and token secrets like passwords. Store them in Boomi only, never in emails or tickets. If one leaks, revoke the token in NetSuite and create a new one.

You also need the Account ID, shown under Setup → Company → Company Information. Sandboxes have IDs such as 1234567_SB1.

Part 2: the Boomi connection

Boomi fieldValue
Authentication typeToken-Based Authentication
Accountyour NetSuite account ID
Consumer Key / Consumer Secretfrom the integration record
Token ID / Token Secretfrom the access token
Versionthe SuiteTalk version you want to work with
NetSuite connection using token-based authentication (illustration).
NetSuite connection using token-based authentication (illustration).

Use Test Connection. Most failures at this point come from a missing role permission or a token created for a different role or user.

Part 3: operations

Create a NetSuite operation, choose the action, click Import and select the record type. Boomi builds the request and response profiles from NetSuite’s schema, including your custom fields.

ActionTypical use
Queryread records using filters
Getread one record by internal ID
Create / Updatewrite records
Upsertcreate-or-update using an external ID
Deleteremove records
Search (saved search)run a saved search defined in NetSuite
An Upsert operation for the Customer record (illustration).
An Upsert operation for the Customer record (illustration).

Tip: Let NetSuite do the selecting. A saved search keeps filter logic in NetSuite where finance teams can see and adjust it, and the Boomi process simply runs it.

Example: upsert customers from a file

  1. Start with an SFTP Get for the customer CSV.
  2. Map each row to the NetSuite Customer profile, and map your source system’s key to External ID.
  3. NetSuite Upsert operation.
  4. Use the response to log internal IDs, and route rejected records to an error path.

Because the external ID identifies the customer, running the same file twice updates the records instead of duplicating them.

Troubleshooting

  • Invalid login attempt: check the account ID (including the sandbox suffix), the four keys, and that the token belongs to the same integration record, user and role.
  • Permission violation: add the missing record permission to the role.
  • Concurrency limits: NetSuite limits simultaneous web-service requests per account; reduce parallelism in Boomi if you see concurrency errors.

SOAP or REST?

SuiteTalk SOAP via the NetSuite connector is mature and schema-driven. NetSuite’s REST API is newer and convenient for JSON-based work and SuiteQL. See Connect NetSuite with Boomi (REST) for that route.

Further reading

This post is about the project Automating the Research Fund Collection