Context
WEkEO is expanding the ways existing Copernicus users can access the platform. The first trusted authentication source to be activated is the CMEMS User Portal: if you already have CMEMS credentials, you can now use them to sign in to WEkEO directly.
📌 Note: This is the first trusted authentication source added to WEkEO. Other sources may be added in the future, we'll update this article when that happens.
Signing in step by step
Let's see how to sign in to WEkEO using your CMEMS User Portal credentials.
Step 1. Start the sign-in process
Go to the WEkEO Portal and click on Sign In as usual.
Step 2. Choose "Sign In With CMEMS User Portal"
The WEkEO sign-in window now shows an additional option to sign in with an external provider: Sign In With CMEMS User Portal.
⚠️ Important: As mentioned in the login-window, by using “Sign In With CMEMS User Portal”, users are accepting the WEkEO General Terms and conditions and the WEkEO Privacy Statement.
Step 3. Log in with your CMEMS credentials
After clicking Sign In With CMEMS User Portal, you'll be redirected to the CMEMS User Portal login page, where you can enter your CMEMS credentials and click Sign In.
📌 Note: if you already have a Copernicus Data Space Ecosystem (CDSE) account you can sign in to Copernicus Marine directly with your CDSE credentials.
You'll then be redirected back to the WEkEO Portal, already logged in as a WEkEO user.
What's different for a federated user?
A federated user doesn't have a dedicated WEkEO profile. This means the popup window that appears when you click on your username won't show a link to My Profile. Instead, it will indicate the federation origin of your account (e.g. CMEMS).
Apart from that, a federated user can use all WEkEO services exactly like any user with native WEkEO credentials, including:
Opening a JupyterHub profile session
Using the Data Access service
Accessing the Jupyter Catalogue Notebooks
Accessing your Drive Nextcloud shared storage
Using the Harmonised Data Access (HDA) API with federated credentials
If you use the HDA API or related tools directly, note that the token endpoint has been updated to accept your federation origin as an additional parameter.
Use the following request, replacing USERNAME and PASSWORD with your CMEMS credentials:
curl --request POST \
--url https://gateway.prod.wekeo2.eu/identity/gettoken \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'username=USERNAME' \
--data-urlencode 'password=PASSWORD' \
--data-urlencode 'origin=cmems'
💡 WEkEO Pro Tip: The origin=cmems parameter is what tells WEkEO to validate your credentials against the CMEMS User Portal rather than a native WEkEO account.
📌 Note: The WEkEO-provided tools (HDA Python library, EO Canvas, QGIS plugin) are currently being updated to support this. We will update this article once that update is available.
What's next?
Additional resources can be found in our Help Center. Should you require further assistance or wish to provide feedback, feel free to contact us through a chat session available in the bottom right corner of the page.