Riot Sign On (RSO)

Hi Folks,

It's been a while since we last posted, and we've got some exciting news to share. We’re announcing a super-limited new developer feature: Riot Sign On (RSO). Our intention is to make sure everyone is aware of this new feature, but we also want to caution that we are NOT accepting requests for access. This is, as we said, super-limited for now.

Riot Sign On

Before we get into all the details, let’s start with the basics. RSO utilizes OAuth for authentication which allows for players to authorize third parties to obtain access to the player’s account or game information without the player having to share their password. When a third party would like to request access to a player’s account or game data, they redirect the player to login via RSO. After the player has acknowledged they’re granting a third party access to their data, they’re redirected back to the third party with a token which the third party can use to access player information.

Riot Games API Integration

Now, what we’ve all been waiting for: how this ties into the Riot Games API. Well since OAuth is an industry standard for access delegation and authentication, we can use the tokens provided to third parties as a method of authentication for the Riot Games API, replacing the need for API keys. Riot Games API requests made with an RSO token inherently validate the player’s consent and are only provided to the third party who owns the RSO client (OAuth client).

Today

Legends of Runeterra is the first game API that will utilize RSO tokens. Starting today, a third party developer with an RSO client can request access to the Legends of Runeterra RSO API which will allow players to view their card inventory, view their decks, and create decks through a third party product. We’re excited to continue to expand the Riot Games API offering that utilizes RSO tokens in the future.

The Future

We’re still in the early stages of rolling out third party RSO client registration. At this time, we’re mostly focusing on granting RSO clients to third parties that we’re partnering with for various business reasons which include tournaments, product launches, and loot drops. 

Do not submit a request for an RSO client. There are no applications, and we will not respond to asks from developers about this service. Our team will reach out to developers as we expand who has access. 

Our long term vision is that every developer will be able to apply for an RSO client in the Developer Portal similar to how you apply for a production API key. We’ll keep you updated as we continue to make progress.

Thanks,

Gene