This page describes the available login methods, and what to expect as EWC moves toward a fully integrated identity experience. It provides a clear overview of how users authenticate to services within the European Weather Cloud (EWC).

User Access

EWC introduced a unified identity system called EWC IAM.

EWC IAM can federate with other existing IAMs as well (e.g. ECMWF IAM, EUMETSAT User Portal) therefore you will be able to use credentials from federated IAM if they are enabled for a certain service.  If you would like to federate another identity provider with EWC IAM, please raise a support ticket here.

A local account is a username and password stored within a single EWC service, managed independently by that service.

The goal is to have all EWC services accessible with the same user credentials in the future. While we transition to the use of EWC IAM, some services might still support local accounts. You can check the table below for more details.

Service Access Summary Table

Some EWC services exist on both EWC sites (ECMWF and EUMETSAT), such as core infrastructure services or Kubernetes service, while others are hosted only on one site but remain accessible to all EWC users. Because the two sites use different service URLs, you may see multiple entry points, but authentication is unified — all sites use the same EWC IAM login.