You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 3 Next »

The goal of this guide is to help users understand the available login methods, when to use each one, and what to expect as EWC moves toward a fully integrated identity experience. It provides a clear overview of how users authenticate to services within the European Weather Cloud (EWC).

EWC introduced a unified identity system based on EWC IAM. All EWC services will be accessible with the same user credentials in the future. EWC IAM can federate with other existing IAMs as well (e.g. ECMWF IAM, EUMETSAT User Portal). While we transition to the use of EWC IAM, some services might still support local accounts. You can check the table below for more details.

A local account is a username and password stored within a single EWC service, managed independently by that service. An EWC IAM user authenticates through the central identity system using institutional credentials and gains unified access across IAM‑enabled EWC services. 

Tenancy name is the input to start with EWC IAM!​

When you log in to an EWC service using IAM Single Sign-On, your browser keeps your session active. If you need to access another tenancy, you must log out of the service first before logging in again. Alternatively, you can open the service in another browser or use a private/incognito window to avoid session conflicts.

Service Access Summary Table

ServiceEWC IAM userFederated IAM userlocal user

Morpheus

(To be decommissioned by the end of 2026, use OpenStack Horizon)

  1. Go to Morpheus tenant URL 

    Example: Dedicated URLs for tenant mytenant

    ECMWFhttps://morpheus.ecmwf.int/login/account/mytenant
    EUMETSAThttps://hcmp.icsi.eumetsat.int/login/account/mytenant
  2. Select EWC IAM Account to be redirected to the EWC IAM login page
  3. Enter your EWC IAM user credentials in order to get into the service.  


  1. Go to Morpheus tenant URL 

    Example: Dedicated URLs for tenant mytenant

    ECMWFhttps://morpheus.ecmwf.int/login/account/mytenant
    EUMETSAThttps://hcmp.icsi.eumetsat.int/login/account/mytenant
  2. Select Federated IAM button (e.g. ECMWF SSO) to be redirected to the Federated IAM login page
  3. Enter your Federated IAM user credentials in order to get into the service.


Tenant login page

  1. Go to Morpheus tenant URL 

    Example: Dedicated URLs for tenant mytenant

    ECMWFhttps://morpheus.ecmwf.int/login/account/mytenant
    EUMETSAThttps://hcmp.icsi.eumetsat.int/login/account/mytenant
  2. Select Username and Password (he name of the tenant is on the portal URL, there is no need to include it in the username field).

General login page

This is the door anyone with an account, no matter the tenant, can use.

  1. Go to Morpheus URL 
    ECMWFhttps://morpheus.ecmwf.int/login/auth
    EUMETSAThttps://hcmp.icsi.eumetsat.int/login/auth
  2. Select Username and Password (every tenant has a different user set, therefore you will need to prefix your actual username with the tenant name in the username field. Example: Logging in the tenant mytenant with the user account myuser



OpenStack Horizon
  1. Go to Horizon URL 


    ECMWF
    EUMETSAT
  2. Select EWC IAM Account to be redirected to the EWC IAM login page
  1. Go to Horizon URL 


    ECMWF
    EUMETSAT
  2. Select Federated IAM button (e.g. ECMWF SSO) to be redirected to the Federated IAM login page
N/A
AccountingN/AN/ACurrently only local accounts. Go to EWC Accounting Dashboard - European Weather Cloud Knowledge Base - ECMWF Confluence Wiki
Discussion PlatformN/AN/ACurrently only local accounts. EWC Discussion Platform - European Weather Cloud Knowledge Base - ECMWF Confluence Wiki
EWC K8s
  1. Go to Kubernetes URL: 
    ECMWFTBD
    EUMETSAT

    https://k8s.eumetsat.europeanweather.cloud/

    (follow documentation: EUMETSAT EWC Managed Kubernetes Service - Accessing the System - European Weather Cloud Knowledge Base - ECMWF Confluence Wiki)


N/A
EWC Container RegistryCOMING SOONCOMING SOONN/A
EWC Secret ManagerCOMING SOONCOMING SOONN/A








  • No labels