Authenticating Users in Your VR Apps
Tags: security, programming, gamedev
Published: 2022-03-17 14:18:56

### Many VR apps handle user authentication poorly, leaving users frustrated when trying to sign in to new apps. Join Auth0’s open discussion on IdP-neutral experiences.

### <br>

**TL;DR:** Despite the recent spike in adoption, VR (Virtual Reality)  is still a new medium. Many VR apps handle user authentication poorly, leaving users frustrated when trying to sign in to new apps. As part of our research for improving the developer and the user experience for VR authentication, we propose an incremental improvement approach for user authentication experience for VR and open the discussion on what it will take to achieve better IdP-neutral experiences.

![VR](https://images.ctfassets.net/23aumh6u8s0i/6vQj9zOTzDRYSLfaU5QPz4/ecd2d02a29146a32a65bfe7a5d2290b4/VR_Authentication_Separator_01.jpg)

## VR Is Accelerating; AR Is Next

It’s not very common for sci-fi tropes to actually come true in our lifetimes (“where is my flying car?”), but it looks like it’s happening to Virtual Reality (VR).

Thirty years ago, VR was a thing [on the pages of Neal Stephenson](https://en.wikipedia.org/wiki/Snow_Crash) or at [the movies](https://www.imdb.com/title/tt0104692/). The Oculus Quest 2, a standalone VR headset priced at less than half of a modern gaming console, was [one of the must-have gadgets of the holiday season 2021](https://uploadvr.com/vr-player-sales-numbers-christmas-2021/) —  accelerating a run that [has been going strong](https://www.theverge.com/2021/11/16/22785469/meta-oculus-quest-2-10-million-units-sold-qualcomm-xr2) since its release date. With Meta’s [increasing investment in the Metaverse](https://www.nytimes.com/2022/02/02/technology/meta-facebook-earnings-metaverse.html), this adoption is only likely to continue.

The distribution and price point have been an absolute boon for developers, in particular for [game developers](https://uploadvr.com/beat-saber-100-million-revenue/), who are increasingly targeting VR users with their products. The COVID-19 pandemic resulted in forced isolation, social distancing, and increased remote work, all of which inspired a brand new wave of immersive collaboration and social networking tools ([Workrooms](https://www.oculus.com/workrooms/) and [Horizon](https://www.oculus.com/horizon-worlds/) are just two examples of the many apps in those new categories). Job training, fitness, even therapy are among the other categories emerging as applications that can really benefit from the new medium.

There are signs suggesting that this is only the beginning. Meta seems to be on top of today’s VR market, but it’s clear that they will soon face formidable competitors. Apple, Google, and Snapchat are reported to be working on VR and augmented reality (AR) headsets of their own. 

AR has the potential to be an even bigger revolution than smartphones, bringing a semantic layer on top of everyday reality, and today’s development tools for VR can be used to target AR as well. It’s no wonder that new VR applications are proliferating in greater numbers every day.

## Authentication in Today’s VR Apps

![Authentication](https://images.ctfassets.net/23aumh6u8s0i/5QsE9ukCu08loeF2EDwOcK/b11bca059ca67b1f59bd1a530e42f265/Uploaded_from_Authenticating_Users_in_Your_VR_Apps)

At first glance, one might think that developing apps for VR is a big technical challenge. As it turns out, developing an app that can run on a VR headset is surprisingly easy.

VR headsets were first popularized and remain primarily used as gaming devices with a blossoming developer community. The gaming industry created extraordinary tools such as the [Unity game engine](https://unity.com/) and development platform. Unity began in 2005 and is now a comprehensive ecosystem with creator tools, a vibrant community, and abundant content that makes it easy (and free for indie developers) to create 3D games targeting PC, consoles, iOS, and Android.

VR headset manufacturers such as Meta and Google (Google pioneered the [cardboard headset class](https://developers.google.com/cardboard/develop/unity/quickstart)) leveraged Unity’s popularity, releasing SDKs that make it very easy to retarget existing and new apps to their hardware and expose the special capabilities of the VR environment through primitives compatible with the Unity API.

Having the tools to easily make an existing app run in VR, however, doesn’t necessarily mean that its experience in VR will be good as-is! Let’s pick a concrete example: the authentication experience. 

Games and apps originally designed to run on a desktop can rely on a vastly different arsenal of affordances: full keyboards, password managers, the ability to switch between your app and a system browser... all those things are either problematic or impossible in VR at the moment.

[Read more...](https://auth0.com/blog/authenticating-users-in-your-vr-apps/?utm_source=content_synd&utm_medium=sc&utm_campaign=auth0)