The Login/Register feature controls how customers access your SuiteCommerce storefront: how they create accounts, how they authenticate on return visits, and what access level anonymous visitors have. Getting this configuration right has direct implications for conversion rates, data quality in NetSuite, and security posture.
This guide covers the full setup process without requiring a dedicated NetSuite developer, along with the most commonly requested configuration variations.
One important concept to understand before configuring registration: in NetSuite’s data model, a visitor who registers but has not yet purchased is created as a Lead, not a Customer. NetSuite converts the Lead to a Customer record automatically when the visitor completes their first purchase. This affects how you segment and communicate with registered users in your email marketing platform, since pre-purchase registrants and post-purchase customers are separate record types in the CRM.
The Standard Registration Form
SuiteCommerce’s registration form requires four fields by default:
- First name and last name
- Email address
- Password (entered twice for confirmation)
An optional newsletter opt-in checkbox can be added to the form, allowing new registrants to subscribe to marketing communications at the point of account creation. This checkbox should be unchecked by default to comply with email marketing consent best practices.
Email Duplicate Detection
By default, SuiteCommerce allows multiple accounts to be created with the same email address. For most merchants, this creates data quality problems in NetSuite: duplicate customer records, split order history, and confused email marketing profiles.
The Website Duplicate Email Detection feature prevents this by detecting duplicate email addresses at registration and presenting the existing-account user with an option to use a different email or reset their existing password.
How to Enable It
- Go to Setup > Company > Enable Features
- On the Web Presence subtab, check Web Site Duplicate Email Management
- Agree to the Terms of Service
Important: NetSuite will present a security warning when enabling this feature. The warning explains that the feature could be exploited to enumerate registered email addresses by testing multiple addresses and observing which ones trigger the “already registered” message. NetSuite’s recommended mitigation is implementing CAPTCHA or another anti-automation control on the registration form to slow down enumeration attempts.
- Go to Setup > Company > General Preferences
- Under Web Site Duplicate Email Management, select Enable Duplicate Detection
- Click Save
The security risk associated with this feature is real but manageable. For most merchants, the data quality benefit of preventing duplicate accounts significantly outweighs the enumeration risk, particularly when CAPTCHA is implemented. B2B merchants with invited-only registration can reduce the risk further because their registration audience is a controlled set of known contacts.
Login Configuration
Once registered, customers log in with their email address and password. The “Forgot password?” link triggers a reset email from NetSuite, allowing the customer to set a new password and proceed.
For B2B merchants who manage customer accounts with multiple users under a single company account, the login experience can be extended through SuiteCommerce’s customer hierarchy features. Individual buyers within a company account each have their own login credentials but operate within the permissions and pricing configuration of the parent company account.
Frequently Asked Configurations
Can I password-protect the entire site?
Yes. Many B2B merchants require login before any catalog or pricing information is visible, preventing competitors and casual visitors from accessing account-specific pricing or restricted product lines.
To enable site-wide password protection:
- Go to Commerce > Website > Website List
- Select your site
- Go to the Shopping subtab
- Check Password Protect Entire Site on the Registration Page section
Site-wide password protection is a common configuration for wholesale distributors and manufacturers who publish customer-specific pricing and do not want that pricing visible to anonymous visitors. It is also useful for merchants who are building or testing a new storefront and want to prevent public access until launch.
How do I configure guest checkout?
Guest checkout allows customers to complete a purchase without creating an account. This is typically used by B2C merchants to reduce checkout friction, since forced account creation is one of the leading causes of checkout abandonment.
- Go to Setup > SuiteCommerce > Setup Website
- Select Edit on your website
- Go to the Shopping subtab > Registration Page section
- Set Type of Customer Registration to Optional
With this setting, shoppers can choose to register or proceed without creating an account.
 Guest checkout orders still create a record in NetSuite — a contact record with the order information — but the visitor is not formally registered and does not have a login. This means guest checkout buyers will not appear in your registered customer segments in Klaviyo or other email platforms unless you have configured guest email capture and explicit marketing consent at checkout.
Registration type reference
Setting | Behavior
**Disabled** | All shoppers are anonymous. No registration form is available.
**Existing Customers Only** | Only pre-approved customers with login credentials can complete checkout. Used for invite-only B2B storefronts.
**Optional (Anonymous/Guest)** | Customers can register or shop as a guest. This enables guest checkout.
**Required** | All shoppers must register before completing a purchase. A NetSuite record is created even if the shopper does not complete checkout.
How do I add a Company field to the registration form?
For B2B storefronts, capturing the buyer’s company name at registration improves data quality in NetSuite and allows sales teams to identify and engage high-value accounts.
- Go to Setup > SuiteCommerce > Setup Website
- Select Edit on your website
- Go to the Shopping subtab > Registration Page section
- Check Display The Company Field On Registration Page
- If company is required: also check the Mandatory checkbox
How do I create new customer accounts as Companies instead of Individuals?
By default, NetSuite creates registered customers as Individual records. For B2B merchants, Company records are the appropriate type because they enable account hierarchy, multiple contacts per company, and company-level credit and pricing configurations.
- Go to Setup > SuiteCommerce > Setup Website
- Select Edit on your website
- Go to the Shopping subtab > Registration Page section
- Check Create Customers as Companies
- Ensure the Mandatory checkbox for the Company field is also selected
This setting is important for B2B merchants to configure before going live. Customers created as Individual records cannot easily be converted to Company records retroactively without data cleanup. Setting up the correct customer type from the beginning avoids a significant data migration task later.
For more SuiteCommerce setup guides, visit our YouTube channel or download the free SuiteCommerce Training Manual.


