When you go to 3rd party websites about Eve Online, such as ZKill Board or Eve Gatecamp Check, you may be asked to log in using the Single Sign On before seeing information specific to your character.
What is Single Sign On? Why are 3rd party websites using SSO? Keep reading!
What is the Single Sign On (SSO)?
SSO is a tool websites give developers to allow users to log into a website or application without having to enter user credentials. Think about the sites where you use your Facebook, Google, or another account to either create an account for something, or log into an account. CCP created the Eve SSO for website devs and apps to use.
Is SSO Allowed by CCP?
YES! They created the Eve Online SSO so that web developers like ZKill Board, Dot Lan, or even myself can create products for you to utilize, without ever having to ask you to officially register.
With ZKill, when you log in using the SSO and choose a character, then while you’re logged in you can easily pull up that character’s kill board without having to search. With Eve Gatecamp, when you’re logged in you can send an in game donation of isk to get the different premium benefits.
So as you can see, it’s a really handy way for players to log in and connect their character to the 3rd party resource. And, of course, I will be using this for EveOnlineEvents.com (TBA) when it’s launched because lets face it, what spammer is going to create Eve accounts just to add bogus events to my Public Event Calendar?
Is Eve Single Sign On Safe?
SSO is meant to be a safe way to log into a 3rd party website or app without having to pass along sensitive things like email, IP or password. However, even though CPP has made the SSO for web developers to use, it’s still up to you to decide if the people behind the application you want to use are trusted individuals.
How can you protect yourself? When you click the “log in with Eve Online” button, make sure you’re redirected to a page that looks like the screen shot above and links to https://login.eveonline.com/. You’ll see in your browser that there is a valid SSL certificate (the little “lock” up in most modern browsers).
If you click on that little lock, you’ll see the SSL certificate was issued to *.eveonline.com so it’s good for any of the official eveonline.com subdomains like the SSO domain.
Of course, websites like Eve Rookies (though we’re not even using SSO for users atm) could ask for your email on your account profile in order to send you notifications or newsletters. At this point, it’s up to you to decide if you want to give out this information or not!
But, if the popular 3rd party sites ask you to log in with your Eve Account, it’s (usually) going to be perfectly fine.
Fly safe! o7