3.9.0

[3.9.0] - 2026-11-03

Added

• Added Unity services CLI commands for Authentication, available when com.unity.pipeline is installed.
• Added services.authentication.player_accounts CLI commands (compiled only when com.unity.pipeline is installed) to set up Unity Player Accounts for the linked project without the Dashboard: enable, get and update for the project's Player Accounts client, and list_identity_providers, create_identity_provider, enable_identity_provider, disable_identity_provider and delete_identity_provider for the game's own Apple, Google and Facebook apps.
• Live Releases: sign-in requests now include the release pointer configured in Core, so the server resolves the player's session to that release. The resolved release is available from AuthenticationService.Instance.Targeting.ReleaseId and ReleaseName, and is shared with other Unity Gaming Services packages through Core.
• Live Releases: in Play Mode in the Editor, sign-in uses the release selected for the active environment in Project Settings > Services > Environments, unless a release pointer is set in code.

Changed

3.8.1

[3.8.1] - 2026-10-21

Fixed

• Fixed targeting sending no attributes on sign-in, so no variant tags resolved, in players built with Managed Stripping Level Low or higher.

3.8.0

[3.8.0] - 2026-09-14

Added

• Added IAuthenticationService.State, exposing the current AuthenticationState (SignedOut, SigningIn, Authorized, Refreshing, Expired) that reflects the lifecycle of the player's session and access token.
• Added support for the Apple Swift Xcode project type on iOS. Requires Unity 6000.6.0b7 or newer, which exposes the project type's public symbols through the UnityAPI framework.

Changed

• Now always enabling the server assembly in editor mode to enable authoring assets. This assembly remains unavailable on non dedicated server builds. (Condition: UNITY_EDITOR || UNITY_SERVER || ENABLE_UCS_SERVER)

3.7.4

[3.7.4] - 2026-08-12

Fixed

• Fixed server access tokens never being refreshed. The scheduled refresh re-entered the sign-in methods, which rejected the Refreshing state with ClientInvalidUserState, logged Failed to refresh access token due to network error or internal server error, will retry later. and eventually moved the server to Expired. This affected both SignInWithServiceAccountAsync and SignInFromServerAsync. A refreshed service account token is now also granted the scopes requested at sign-in, and a refresh that fails keeps the current access token instead of reporting an AuthorizationFailed event.

3.7.3

[3.7.3] - 2026-07-06

Fixed

• Fixed the Authentication SDK leaking low-level exceptions (such as NullReferenceException) instead of RequestFailedException under hostile or blocked network conditions. Sign-in failures now consistently surface as a RequestFailedException; a null or empty response is reported as CommonErrorCodes.TransportError.
• Fixed UI samples to use the new input system

3.7.2

[3.7.2] - 2026-06-30

Fixed

• Fixed an issue on iOS where the Unity Player Accounts sign-in window stayed open after sign-in without returning to the app, thereby failing to complete the sign-in process. The fix comes with some changes to the authentication flow on iOS: on calling PlayerAccountService.Instance.StartSignInAsync(), users will now see a pop-up ' wants to use "unity3d.com" to sign in' with 'Cancel' and 'Continue' buttons. If the user presses 'Continue', they will then proceed to the sign-in page via web view as before, and will be returned to the app on successful sign-in. Pressing 'Cancel' will abort the sign-in attempt and return the user to the app immediately.

3.7.1

[3.7.1] - 2026-06-16

Added

• Restricted session token requests now include the installation ID.

3.7.0

[3.7.0] - 2026-06-03

Added

• Added Targeting component and enablement
  • AuthenticationService.Instance.Targeting.SetEnabled(true);
• Added IAuthenticationService.GenerateRestrictedTokenAsync(RestrictedTokenOptions) for issuing a session token with caller-controlled restrictions, returned to the caller rather than applied to the current session.

Fixed

• Fixed an issue where enabling Unity Player Accounts on iOS removed other custom URL schemes from the app.
• Support for 2021 has been dropped

3.6.1

[3.6.1] - 2026-03-24

Fixed

• Fixed Player Accounts handling of deep links that are not part of an active sign-in.

3.6.0

[3.6.0] - 2025-12-10

Added

• Added ability to specify scopes when signing in with a service account in the server authentication service. The base method now provides all scopes associated to the service account.

Fixed

• Fixed an issue with ID token validation during code-link to check for both null and empty string values, ensuring proper handling of invalid tokens.

Changed

• Changed the SessionToken value to be public for easier access.