It is important not to keep any permanent device association stored on your server. Roku wants to give users the ability to do a "Factory Reset" and have any personally identifiable information wiped from the device. This includes removing any association with server side accounts.
"RokuMarkn" wrote:
However, I should add, neither the MAC nor the DeviceUniqueId should be used to associate the device with an account, if that's what you meant by STB authentication. The SDK warns against this, so that a factory reset is guaranteed to remove any association between the device and any accounts. See section 4.2 of the Developer Guide.
It is important not to keep any permanent device association stored on your server. Roku wants to give users the ability to do a "Factory Reset" and have any personally identifiable information wiped from the device. This includes removing any association with server side accounts.