The goal of this guide is to help users understand the available login methods, when to use each one, and what to expect as EWC moves toward a fully integrated identity experience. It provides a clear overview of how users authenticate to services within the European Weather Cloud (EWC).

User Access Summary Table

EWC introduced a unified identity system based on EWC IAM. All EWC services will be accessible with the same user credentials in the future. EWC IAM can federate with other existing IAMs as well (e.g. ECMWF IAM, EUMETSAT User Portal). While we transition to the use of EWC IAM, some services might still support local accounts. You can check the table below for more details.

A local account is a username and password stored within a single EWC service, managed independently by that service. An EWC IAM user authenticates through the central identity system using institutional credentials and gains unified access across IAM‑enabled EWC services. 

The table below summarize the steps to login depending on the user account you are going to use.

Service Access Summary Table

Some EWC services exist on both EWC sites (ECMWF and EUMETSAT), such as core infrastructure services or Kubernetes service, while others are hosted only on one site but remain accessible to all EWC users. Because the two sites use different service URLs, you may see multiple entry points, but authentication is unified — all sites use the same EWC IAM login.