You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 22 Next »

This page describes the available login methods, and what to expect as EWC moves toward a fully integrated identity experience. It provides a clear overview of how users authenticate to services within the European Weather Cloud (EWC).

User Access Summary Table

EWC introduced a unified identity system based on EWC IAMAll EWC services will be accessible with the same user credentials in the future. EWC IAM can federate with other existing IAMs as well (e.g. ECMWF IAM, EUMETSAT User Portal). While we transition to the use of EWC IAM, some services might still support local accounts. You can check the table below for more details.

A local account is a username and password stored within a single EWC service, managed independently by that service. An EWC IAM user authenticates through the central identity system using institutional credentials and gains unified access across IAM‑enabled EWC services. 

The table below summarizes the steps to login, depending on the user account you are going to use.

IAM userlocal user
  1. Go to service URL (see table below)
  2. OPTIONAL: In some services you will need to input the tenancy name first when you sign in, if that is not the case, go to 3.
  3. EWC IAM userFederated IAM user
    1. Select EWC IAM Account to be redirected to the EWC IAM login page

    a. Select Federated IAM button (e.g. ECMWF SSO) to be redirected to the Federated IAM login page

    b. Enter your EWC IAM user credentials in order to get into the service.  


    b. Enter your Federated IAM user credentials in order to get into the service.

Follow specific service login page



Service Access Summary Table

Some EWC services exist on both EWC sites (ECMWF and EUMETSAT), such as core infrastructure services or Kubernetes service, while others are hosted only on one site but remain accessible to all EWC users. Because the two sites use different service URLs, you may see multiple entry points, but authentication is unified — all sites use the same EWC IAM login.

Tenancy name is the input to start with EWC IAM! You need to know the name of your tenancy (ask your tenant admin if you are not sure)

When you log in to an EWC service using IAM Single Sign-On, your browser keeps your session active. If you need to access another tenancy, you must log out of the service first before logging in again. (Not all services support logging out of IAM. Alternatively, you can open the service in another browser or use a private/incognito window to avoid session conflicts.)

ServiceEWC IAM userlocal user

EWC Cloud Management UI (Morpheus)

(To be decommissioned by the end of 2026)

ECMWF: https://morpheus.ecmwf.int/login/account/{mytenancy}

EUMETSAT: https://hcmp.icsi.eumetsat.int/login/account/{mytenancy}

where {mytenancy} is the name of your tenancy.


EWC Cloud Management UI (OpenStack Horizon)COMING SOONN/A
EWC AccountingN/A

https://accounting.europeanweather.cloud/ 

(follow documentation EWC Accounting Dashboard )

EWC Discussion PlatformN/A

https://chat.europeanweather.cloud/ 

(follow documentation EWC Discussion Platform )

EWC K8sECMWF: N/A

EUMETSAT: https://k8s.eumetsat.europeanweather.cloud/ (follow documentation EUMETSAT EWC Managed Kubernetes Service, still pilot, please request access to it)

ECMWF: ECMWF EWC Managed Kubernetes Service

EUMETSAT: N/A

EWC Container RegistryCOMING SOONN/A
EWC Secret ManagerCOMING SOONN/A
  • No labels