With the upcoming NetSuite 2027.1 release, NetSuite is introducing mandatory Two-Factor Authentication (2FA) for all employee roles by default. This change directly affects how desktop integrations connect to your NetSuite instance.
This guide outlines your options for maintaining connectivity in Solution 7: the recommended path (upgrading to Solution 7 Version 4.13 with Token-Based Authentication) and the alternative path (remaining on Version 4.12 by adjusting your NetSuite 2FA settings).
Looking Ahead: A future edition of Solution 7 supporting OAuth 2.0 is planned for release in Spring 2028. Transitioning to Version 4.13 with TBA today positions your environment for that next evolution without requiring emergency configuration changes later.
Option 1 (Recommended): Upgrade to Solution 7 Version 4.13 and Migrate to TBA
Upgrading to Solution 7 Version 4.13 allows your organization to adopt NetSuite’s mandatory 2FA security standards without disrupting Excel reporting.
Important Note: Simply installing Version 4.13 is not enough on its own. To benefit from the enhanced security and maintain access under full 2FA enforcement, administrators and users must also configure and switch the connection profile to use Token-Based Authentication (TBA).
Step 1: Enable Token-Based Authentication in NetSuite (If Not Already Done)
(Administrator access required)
If your organization already uses TBA for other integrations or bundles, this feature is likely already active. Check that the box is ticked and proceed to Step 2.
- Log in to NetSuite as an Administrator.
- Go to Setup > Company > Enable Features.
- Select the SuiteCloud tab.
- Scroll to Manage Authentication and ensure Token-Based Authentication is checked.
- Click Save if you made changes.
Step 2: Configure Role Permissions
Every NetSuite role used with Solution 7 requires token permissions (if you already use the ‘Solution 7 REporting’ role, you don’t need to make any changes to your role permissions):
- Go to Setup > Users/Roles > Manage Roles and click Edit next to the role used for Solution 7.
- Under Permissions > Setup, add the following permissions with Full access:
- Log in using Access Tokens
- User Access Tokens (allows users to manage their own tokens)
- SuiteAnalytics Connect
- Web Services / RESTlet
- Click Save.
Step 4: Issue User Access Tokens
Solution 7 Version 4.13 automates token creation—you do not need to manually create or copy Token IDs and Token Secrets inside NetSuite. Token setup is completed directly through a browser authorization flow
- Open Microsoft Excel and navigate to the Solution 7 ribbon tab.
- Click Configure > Adapters (or edit your existing connection profile).
- Set the Data Provider and Authentication dropdowns to Token-Based Authentication (TBA).
- Click the Connect button that appears to the right of the authentication field
- In the browser window that opens, log into NetSuite if prompted.
- Select your assigned reporting role (Solution 7 Reporting) rather than the Administrator role.
- Click Allow to grant access and generate the token in the background.
- Return to Excel, click OK, and select Activate to finish configuring your connection profile.
Administrator Tip: If you want to keep a copy of your previous connection setup for fallback purposes, right-click and copy your configuration file in the Configure window before changing the data provider to TBA
Step 5: Install Solution 7 Version 4.13 & Update Connection Credentials
- Download and run the installer for Solution 7 Version 4.13 from the Zone Help Center / Solution 7 Downloads portal.
- Open Microsoft Excel and navigate to the Solution 7 ribbon tab.
- Click Configure > Adapters (or edit your existing connection profile).
- Switch the authentication method to Token-Based Authentication (TBA).
- Click Test Connection, confirm it validates, click OK, and select Activate.
Option 2: Remaining on Solution 7 Version 4.12
If your organization is not ready to upgrade to Version 4.13 and reconfigure connections to TBA, you can continue using Solution 7 Version 4.12 after your account upgrades to NetSuite 2027.1 by adjusting an account-level setting.
What Administrators Must Do in NetSuite:
- Log in to NetSuite as an Administrator.
- Navigate to Setup > Company > Enable Features.
- On the Company tab, scroll to the bottom of the page.
- Locate the setting “Require 2FA for all employee roles”.
- Untick (disable) this checkbox.
- Click Save.
Security Impact of Remaining on 4.12
When disabling this setting, NetSuite presents an alert stating that account security will be weakened. In practice:
- Turning this setting off does not make your existing environment less secure than it is today—it simply retains your current security baseline.
- It does mean, however, that your account will not take advantage of the enhanced account-wide 2FA protections NetSuite is introducing in 2027.1.