Your Windows Store apps can sign users in and out with their Microsoft accounts so that your apps can access their data in Microsoft cloud services like Outlook.com and Microsoft SkyDrive.
Apply these guidelines when you design your app's sign-in and sign-out experience so that it provides a user experience that's consistent with other Windows Store apps. These guidelines also help your app keep the user's data secure.
Accessing users' data from Microsoft cloud services like Outlook.com and SkyDrive requires that users sign in with their Microsoft account and give consent for your app to access the data that the app requires. To help users keep their data secure from other users of their computer, your Windows Store app should also make it possible for the user to sign out of the app. This topic describes how to do that.
Important If your app does not enable users to sign out, the app will be able to access the users' data whenever the app runs from the computer account in which they first signed in. Although this provides a great convenience to users who never share or lose their computer, it presents a possible security vulnerability if the computer is used by another person or if the computer is stolen. For these reasons, your Windows Store app should always indicate when it is signed in to a user's account and provide the option for the user to sign out.
Note If the user's computer account is associated with a Microsoft account, the user cannot sign out of their Microsoft account from within the app. This should occur only on personal computers and not shared computers.
These steps describe at a high level how your app can access the user's profile info. To see the detailed instructions, see How to use Microsoft services in your app.
Your app must call WL.init() once in each page that uses functions from the Live SDK.
You might be able to simplify this in your app by keeping the functions that call the Live SDK in a single file.
Add the required settings commands to the app
If your app is a Windows Store app that uses Microsoft cloud services like Outlook.com and SkyDrive, it must make it possible for the user to find and read your privacy statement and it should make it possible for the user to sign out, if it is possible to sign out.
One way to do this is to have these two entries in the app's Settings pane.
The Account command in the Settings pane shows the Flyout in which users can sign in to and sign out of their Microsoft account.
The Privacy statement command in the Settings pane shows the Flyout that contains your app's privacy statement. Because your app will be accessing the users' personal data, it must have a privacy statement.
This image shows a setting pane with those commands added explicitly. If you app has other settings, you might also consider putting the sign-in and sign-out functionality or the privacy statement on a Settings flyout with other related entries. The important point is that these settings must be available and discoverable in your app.
Provide a privacy statement
Important If your Windows Store app accesses users' personal data, you must provide a privacy statement when you submit your app to the Windows Store and the privacy statement must also be available from within your app. For more info about this and other Windows Store app requirements, see the App certification requirements for the Windows Store.
Sign the user in
Your app can do this automatically when it starts, or it can allow users to sign in only when they need to access to data that is stored in Microsoft cloud services like Outlook.com and SkyDrive.
Important To provide the most secure and consistent experience, only use the Windows 8 sign-in control, shown here, to sign in a user.
If the user has not already given permission to the app so that it can access his or her profile info, the user will also see this screen.
Sign the user out
Consider how your app will be used. If it accesses data that the user might consider sensitive, your app should sign the user out automatically to prevent unauthorized access. But if the app is used in a more secure environment, you could leave it up to the user to sign out manually by using the Account settings command.
If the user's computer account is associated with a Microsoft account, the user cannot sign out of their Microsoft account from within the app. This should only occur on personal computers and not shared computers.
Users should always understand when the app is connected to their Microsoft account and when it isn't.
Show the sign-in state in the app's UI
Add some type of indication to your app's UI to show users when they are signed in and the app can access their info.
Note It's important for your app to let users know when they are signed in. This could be done as simply as by displaying their name or by listing elements that come from data that is stored in their Microsoft cloud service. For example, if your app displays users' photos from their SkyDrive, it could display a list of their photos when they are signed in, and a message that they need to sign in if they are not signed in.
- How to use Microsoft services in your app
- Live Connect and the Live SDK
- Guidelines for single sign-on and connected accounts
- Guidelines for login controls
Build date: 11/16/2013