Get Started

EOS Epic Account Services is part of Epic Online Services (EOS). EOS consistes of two sets of resources: EOS Epic Game Services, and EOS Epic Account Services. See the following documentation to find out more: Epic Online Services (EOS) Overview and EOS Get Started

EOS Epic Account Services are a set of resources which are specific to using Epic Games accounts in your game.

If you use EOS Game Services in your game, you do not require EOS Epic Account Services. Players can connect to your game using either an identity from a supported identity provider (such as a Steam account) or an Epic Games account.

Before you can begin setting up an EOS Epic Account Services account and application, be sure that you fulfill these prerequisites:

1. Sign up for the Developer Portal (dev.epicgames.com/portal) and enable multi-factor authentication on your account.
2. In the Developer Portal, create your own organization or become a member of an existing one.
   To do this, you need an Epic Games account (see www.epicgames.com/account) and your organization memberhsip role needs to be Admin.
3. Create or pick a product to use EOS Epic Account Services.
4. From the Developer Portal, download the latest version of EOS SDK.
   See the EOS Quick Start for more information on the EOS SDK.

You can find Epic Account Services from the Developer Portal along the navigation panel or the home page for a product.

To proceed to the Epic Account Services dashboard, you must review and accept a Service Addendum for Epic Account Services. You can always review all accepted agreements under the Licenses tab of the Organization section in the Developer Portal.

You should also review the Epic Games Privacy Policy to understand how Epic Games collects, uses, and shares user data.

Depending on your organization type, you may only need to accept each license agreement once (as a Company entity). However, Individual entities require each member with access to the EAS dashboard to accept the agreement.

From the Epic Account Services dashboard, you can proceed creating your first application. The Developer Portal will show a placeholder for a future application, but none of the configuration details.

Click to enlarge image.

Application configuration consists of three major sections:

1. Brand Settings: Name, logo, privacy policy URL, and support URL.
2. Permissions: The access permissions that the application asks users for.
3. Linked Clients: Association of the application with client credentials used by the SDK during the authentication flow.

Click Configure to proceed with each of these.

The first section for configuring your application is Application Brand Settings.

Click to enlarge image.

On the left you can see a preview of the consent dialog that will be shown to Epic users requesting their permission to share information with that application. The preview is available in a mobile and a web version.

Initially, a red warning banner will appear at the top of the preview for the consent dialog. This warning indicates that the application brand settings have not been reviewed against potential toxicity or an attempt to spoof the brand. Additionally, the consent dialog for an unverified application is prefaced with another warning dialog. The purpose of the double warning is to fully ensure that the user understands all the implications of proceeding with an unverified application.

All applications are created unverified, and with audience restrictions in place. Only members of the same development organization will be able to use their Epic Games accounts to authenticate against this unverified application. All other users will see an audience restriction error message. The purpose of these audience restrictions is to protect Epic users while allowing developers to iterate on integration while they prepare the application for the brand review.

To remove these restrictions, the details in the fields on the right must be filled out and submitted for Application Brand Review. These include:

• Application Name: A friendly name for your application that will display to users. This is set to the product name by default.
• Privacy Policy URL: A URL where users can find your application's privacy policy.
• Application Logo: A 128 x 128 opaque PNG or JPG that will represent your application on the consent dialog.

As you update these fields, the preview will immediately update to reflect your changes.

Click to enlarge image.

Once application is created and brand settings are saved, go to the next tab.

The Permissions tab is where you define the level of access the application will request from the user.

Click to enlarge image.

Epic Account Services ships with support for three basic permissions:

• Basic Profile: Allows read access to user display name, language preferences and linked account display names.
• Online Presence: Allows the application to set the online presence of the current user and receive online presence updates from their friends.
• Friends: Allows read access to the friends list for the current user's account.

Basic Profile is always required for Epic Account Services and can not be deactivated as you cannot get access to any user data without it. Online Presence and Friends may be enabled or disabled per the needs of your application. Toggle on the permissions you want to enable for your application, then click Save to save your changes. The consent dialog preview will update to reflect the permissions you add or remove.

Click to enlarge image.

Finally, the Clients tab enables you to configure a list of clients associated with this application. A client is any piece of software or website that can access the application's data within the Epic Account Services backend. All clients associated with an application are listed in its Product Settings, and all of them share the user's consent once it is given.

Click to enlarge image.

If you already have clients set up for your application, you can select them from the Select Clients dropdown. Otherwise, click Create New Client to open your Product Settings page and configure a new client. For more information on how to add new clients, see the Client Credentials page.

Once you have added a client to this list, click the Save button to save your changes.

Click to enlarge image.

At this point you have completed the EOS Epic Account Services Application Configuration. From here you are ready to integrate EAS into a product and use it to access user data. Following a review of the application brand settings you submitted, audience restrictions will be lifted, and the application can be made visible to users outside of your organization.

Click to enlarge image.

Using an Epic Games account requires no special setup with the EOS SDK. However, you must use a login type appropriate for your target platform (see the Auth Interface), and you must remember to include the scopes you want the user to consent to in the login call that you denoted during your brand review application (their profile, presence, and friends list).

For example, to login via the account portal on a PC, your login call may appear as follows:

This opens a default system web browser that prompts the user to login and review the access application requests.

To authenticate your users on websites and web applications, we support the authorization code flow for OpenID Connect Core 1.0. But before you begin, you must configure an brand review application and client credentials.

To initiate the authentication flow, your application must redirect the user to the authorization page where they will login to their Epic Games account.

Redirect your users to this authorization URL:

To request additional permissions, modify the scope parameter in the authorization request with a space-delimited list of the required permissions. For example, scope=basic_profile friends_list.

You then need to configure the redirect URL for the Client in your Developer Portal.

When a user logs in, they are asked to approve the requested permissions. After accepting, they are redirected back to your application with a code parameter. This code is used when requesting an access token.

Epic Games also supports an optional state parameter that you can use to maintain state between the request and the callback. This can prevent cross-site request forgery attacks.

The following is an example redirect URL after a user is authenticated:

To request an access token, the client makes a request to the token endpoint, including the client credentials and authorization code. The Epic Games token endpoint is https://api.epicgames.dev/epic/oauth/v1/token.

The client credentials pass in the Authorization header using basic authorization.

In the request, you also need to specify the authorization_code grant type and include the code and redirect URL from the authorization flow.

The following snippet shows a sample request (using password grant type):

The response contains the following fields:

The following snippet shows a sample response:

You should always pass the access token as it is in the Authorization header to Epic Games services. For example: Authorization: Bearer eyJraWQiOiJ0RkM...