Where is the XboxLive scope in Azure AD app?

Question

How we can authenticate XboxLive players with AAD? I'm unable to find the XboxLive scopes.

On a gameserver that have Steam and XBL players, it is a nightmare to have equal features that require Omniauth/Openid authentication.

I just need the XBL_ID and gamertag, nothing more, how I can do that?

Thank you in advance.

(PS: I already searched and read all topics about that without success, nothing work.)

Answer 1

I solved the issue by using https://login.microsoftonline.com/consumers authorization endpoint instead of https://login.microsoftonline.com/common This way I got the XboxLive.signin scope without adding it in advance to App Registration in Azure Portal.

E.g. with MSAL JavaScript:

const msalConfig = {
  auth: {
    clientId: ...,
    authority: 'https://login.microsoftonline.com/consumers',
  },
  ...
};

Answer 2

I ran into the same issue, I had the wrong scopes selected which somehow broke the whole system. Make sure you remove any unnecessary scopes. Better yet just use "offline_access XboxLive.signin".

For me it was caused by the User.Read scope