Xsolla Login is a solution that provides users with easier authentication and secures their sensitive data. Login offers you convenient, safe, and fast methods for signing up players or logging them into all of their favorite games.

Features

The solution has the following functionality:

Integration Flow

To integrate Xsolla Login:

1. Set up your Login project in Publisher Account.
2. Integrate the solution on your application side.

Setting up Login project in Publisher Account

1. Create Login project in Publisher Account and specify Name.
2. Go to General settings > URL and fill in the following fields:
   • Callback URL to redirect the user to after successful authentication;
   • Error callback URL to redirect the user to in case of an authentication error. If you do not specify any value, we will be using the Callback URL.
3. Select a storage for user data.
4. Set up the social networks for social authentication.

Integrating the Solution on the Application Side

There are the following possible ways of integration:

• via the widget,
• via API methods if you use your own UI for user authentication.

Integrating via the Widget

To integrate Xsolla Login with Widget 2.0, connect Xsolla Login Widget SDK. If you use the previous version of the widget and want to switch to version 2.0, contact your Account Manager.

Integrating via API

1. Go to Publisher Account > your Login project > General Settings > URL and fill in the Allowed origins (CORS) field. The URL for calling the API methods is passed in CORS. The field is required if the browser is used for sending the requests to API.
2. Implement the callback of the API methods:
   1. Register a New User,
   2. Auth by Username and Password,
   3. Auth via Social Network,
   4. Reset Password.

Processing of Personal Data

Processing of personal data of the European Union (EU) users is regulated according to the provisions of the GDPR. Below you will find a list of the GDPR regulations and how Login can help you comply with them.

Login uses cookies that are necessary for it to work correctly. A registration form in Login Widget is used for giving consent to process cookies.

Consent to Process Personal Data

According to Articles 6-8 of the regulation, you must:

• Request the data subject to give consent to the processing of his or her personal data,
• Give the data subject the right to withdraw his or her consent at any time.

A registration form is used in Login Widget to request user consent to process personal data.

If a user changes his or her decision, you can cancel the processing of the personal data by sending a request to support@xsolla.com.

User Rights

According to Articles 15-17, 19 of the regulation, the user has rights to:

• Get a copy of his or her personal data,
• Ask for the rectification of inaccurate personal data concerning him or her,
• Ask for the erasure of personal data concerning him or her.

To get, rectify or erase user data:

• Send a request to support@xsolla.com if you use the Xsolla storage.
• Read the tutorial if you use PlayFab.
• Choose your own method if you use a custom storage.

Processing and Storage of Personal Data

According to Article 5 of the regulation, personal data shall be:

• Collected for specified purposes and not further processed in a manner that is incompatible with those purposes;
• Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.

Login uses the data that can affect the user's blocking, email sending, payment making, and other ways of applying personal data.

Storage and transfer of personal data are encrypted according to the AES-256 algorithm.

Data Portability

According to Article 20 of the regulation, the user has the right to transmit and store his or her personal data. You must provide the user with structured, commonly used and machine-readable format data.

To get user data:

• Go to your Publisher Account > your Login project > Users if you use the Xsolla storage.
• Read the tutorial if you use PlayFab.
• Choose your own method if you use a custom storage.

User Data Protection

According to Article 32 of the regulation, you must provide a reliable level of data security, using:

• Data encryption,
• Data confidentiality,
• Data integrity,
• Resilient data processing systems.

There are several Login features than can help you comply with the requirements:

• Data encryption in accordance with the AES-256 algorithm,
• Checking for the correctness of the entered password,
• Checking the password for security,
• Data access restriction.

Recipes

Our Recipes will help you try out some of the advanced features of Login:

• Selecting a user data storage
  • Xsolla storage
  • PlayFab
  • Custom storage
• Customizing emails to users
• Tracking new users
• Collecting emails during social authentication
• User Account
• Exporting users to Mailchimp
• OAuth 2.0: Connecting
• Integration with Zendesk Chat
• Single Sign-on
• Silent authentication
• Cross-platform account
• Extended registration form
• Delayed registration in browser games