It is both or used to be both since this feature is being deprecated.
Access orchestrator through browser is now done with the vSphere web client.
For end users it is done either via the vCAC self service portal or can be developped interfacing with the vCO REST API.