Context
WEkEO is expanding the ways existing Copernicus users can access the platform. The first trusted authentication source to be activated is the EUMETSAT User Portal: if you already have EUMETSAT User Portal credentials, you can now use them to sign in to WEkEO directly.
📌 Note: This is the first trusted authentication source added to WEkEO. Other sources may be added in the future, we'll update this article when that happens.
Signing in step by step
Let's see how to sign in to WEkEO using your EUMETSAT User Portal credentials.
Step 1. Start the sign-in process
Go to the WEkEO Portal and click on Sign In as usual.
Step 2. Choose "Sign In With Eumetsat User Portal"
The WEkEO sign-in window now shows an additional option to sign in with an external provider: Sign In With Eumetsat User Portal.
⚠️ Important: As mentioned in the login-window, by using “Sign In With Eumetsat User Portal”, users are accepting the WEkEO General Terms and conditions and the WEkEO Privacy Statement.
Step 3. Log in with your EUMETSAT credentials
After clicking Sign In With Eumetsat User Portal, you'll be redirected to the EUMETSAT User Portal login page, where you can enter your EUMETSAT credentials and click Log In.
You'll then be redirected back to the WEkEO Portal, already logged in as a WEkEO user.
What's different for a federated user?
A federated user doesn't have a dedicated WEkEO profile. This means the popup window that appears when you click on your username won't show a link to My Profile. Instead, it will indicate the federation origin of your account (e.g. EUMETSAT).
Apart from that, a federated user can use all WEkEO services exactly like any user with native WEkEO credentials, including:
Opening a JupyterHub profile session
Using the Data Access service
Accessing the Jupyter Catalogue Notebooks
Accessing your Drive Nextcloud shared storage
Using the Harmonised Data Access (HDA) API with federated credentials
If you use the HDA API or related tools directly, note that the token endpoint has been updated to accept your federation origin as an additional parameter.
Use the following request, replacing USERNAME and PASSWORD with your EUMETSAT credentials:
curl --request POST \
--url https://gateway.prod.wekeo2.eu/identity/gettoken \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'username=USERNAME' \
--data-urlencode 'password=PASSWORD' \
--data-urlencode 'origin=eumetsat'
💡 WEkEO Pro Tip: The origin=eumetsat parameter is what tells WEkEO to validate your credentials against the EUMETSAT User Portal rather than a native WEkEO account.
📌 Note: The WEkEO-provided tools (HDA Python library, EO Canvas, QGIS plugin) are currently being updated to support this. We will update this article once that update is available.
What's next?
Additional resources can be found in our Help Center. Should you require further assistance or wish to provide feedback, feel free to contact us through a chat session available in the bottom right corner of the page.