Sign in with Xbox Live on your website
XAuth (formerly XboxAuth) is a hosted OAuth proxy for Xbox Live. Send your users to Microsoft to log in, then swap the code for their gamertag, XUID, email and profile with a single API call. No XSTS tokens, relying parties or Xbox Live plumbing to build yourself.
- Your own Azure appUse your Microsoft app ID and secret; users see your app name.
- One requestPOST the code to us and get the Xbox Live profile back as JSON.
- Your domainOptional vanity domain with automatic HTTPS.
How to use this!
It doesn't look like you have an app setup yet!
Follow the guide below to set up your app and get started.
-
• Step 1
Go to the New Azure App Developer Portal and click the “New Registration” button.
-
• Step 2
Enter your application name, and leave the “Supported accounts type” on the one that mentions “personal Microsoft accounts (e.g. Skype, Xbox)”.
-
• Step 3
Choose “Public client/native (mobile & desktop)” and enter “https://callback.xauth.dev” for the Redirect URI.
-
• Step 4
Click “Register” to register your app, and continue to the next steps.
-
• Step 5
On this page, you now can see your “Application (client) ID”.
Copy this into XAuth for your app setup. -
• Step 6
On the sidebar (to the left), click “Certificates & secrets”.
This is where you will generate your secret/password for your app. -
• Step 7
On the new page, under “Client secrets” click “New client secret” and create a new secret with the longest expiry available.
Copy this into XAuth for your app setup. You only see it once! -
• Step 8 (OPTIONAL)
Add a description for the client secret.
-
• Step 9 (OPTIONAL)
Under “Branding”, you can customize your app with a logo, website, and terms of service.
— If you're doing this, don’t forget to verify your app! -
• Step 10
Complete filling in your details to create your first app.
-
• Step 11 (TESTING)
Navigate to “https://{App_Key}.xauth.dev” and it should work.