Aspirus Employee Email Login Guide 2026: Secure Remote Access For Wisconsin And Michigan Staff

This guide is strictly for Aspirus Health employees, credentialed clinical staff, and authorized contract partners seeking to access their corporate Microsoft 365 email and internal enterprise applications. If you are a patient looking to view your personal medical records, book appointments, or message your physician, please access the MyAspirus Patient Portal instead of the corporate email network.

Managing remote access securely is a critical operational priority for the Aspirus Health network. Serving communities across northern and central Wisconsin, as well as the Upper Peninsula of Michigan, Aspirus relies on a robust identity provider (IdP) framework to protect patient health information (PHI) and keep thousands of clinical and administrative staff connected.

Whether you are logging in from a regional facility such as Aspirus Wausau Hospital, a community clinic in Portage, or working remotely from home, this guide provides the technical steps, troubleshooting protocols, and security standards required to access your corporate webmail and remote workstation safely in 2026.

Step-by-Step Microsoft Outlook Web Access (OWA) Login for Aspirus Staff

The primary communication channel for Aspirus Health employees is Microsoft Office 365, managed through Microsoft Entra ID (formerly Azure Active Directory). Employees can access their email, shared calendars, and corporate communications from any internet-connected device using standard web browsers.

For maximum compatibility and security, ensure you are utilizing a modern, secure browser such as Google Chrome, Microsoft Edge, or Apple Safari.

Step 1: Navigate to the Secure Login Gateway

Open your browser and enter the official webmail login address designated by the Aspirus IT Department. Employees can directly access their cloud mailboxes via the official Microsoft Office 365 portal or through the dedicated Aspirus Employee Link Hub.

Step 2: Input Your Aspirus Email Address

On the Microsoft sign-in page, enter your complete, official Aspirus email address. This typically follows the format of:

• Standard employee format: firstname.lastname@aspirus.org
• Alternate clinical or legacy formats: username@aspirus.org

Do not use your personal email address or your MyAspirus patient credentials. Click Next to proceed.

Step 3: Enter Your Network Password

Once your email domain is recognized as belonging to the Aspirus organization, you will be redirected to the secure Aspirus branded sign-in portal. Enter your Active Directory network password. This is the same password you use to unlock your physical workstation on-site at any Aspirus medical campus.

Step 4: Complete the Multi-Factor Authentication (MFA) Verification

Because healthcare networks are primary targets for credential theft and cybersecurity threats, Aspirus enforces strict multi-factor authentication. You will be prompted to verify your identity using your designated MFA device, usually via a push notification or passcode generated by the Microsoft Authenticator application.

Once approved, you can select whether you want to remain signed in on that specific browser. Only select "Yes" on secure, privately owned personal computers or designated work-from-home devices. Never choose to remain signed in on public or shared computers.

Multi-Factor Authentication (MFA) and Secure Verification via Microsoft Authenticator

Multi-factor authentication (MFA) is mandatory for all off-network login attempts. Aspirus Health utilizes Microsoft Authenticator as its primary MFA solution to verify identities before granting access to email, HR portals, and clinical systems.

Setting Up Microsoft Authenticator for the First Time

If you are a new hire or registering a new mobile device, you must set up your security credentials while connected to the internal Aspirus network or under the direct supervision of the IT Service Desk.

1. Download the App: Install the official Microsoft Authenticator application from the Apple App Store or Google Play Store on your mobile device.
2. Add Work Account: Open the app, select the option to add an account, and choose Work or school account.
3. Scan the QR Code: On your office computer, go to the security settings page within your Microsoft 365 account profile. Select "Add method" and choose "Authenticator app." Scan the displayed QR code with your mobile device's camera.
4. Confirm the Connection: The portal will send a test notification containing a multi-digit number to your phone. Enter this number into your browser window to verify the sync.

Critical Compliance Standard All clinical, administrative, and contract staff must maintain active MFA setups on their personal or company-issued mobile devices. Disabling MFA or attempting to bypass these authentication prompts is a direct violation of Aspirus Health Information Security policies and may result in immediate suspension of network privileges.

Accessing the Aspirus Citrix Gateway and Epic Remote Applications

For physicians, nurse practitioners, clinical analysts, and support staff who need access to patient records via Epic Systems (including Epic Hyperspace), accessing webmail alone is not sufficient. Clinical workflows require connection via the Aspirus Citrix NetScaler Gateway.

This virtual desktop infrastructure (VDI) environment creates a secure, encrypted tunnel from your remote endpoint directly into the secure Aspirus data center, maintaining HIPAA compliance even when accessing clinical systems off-site.

Accessing Epic and Internal Apps Remotely

1. Install Citrix Workspace: Ensure the latest version of the Citrix Workspace app is installed on your personal device.
2. Navigate to the Remote Portal: Go to the official Aspirus remote access gateway website (remote.aspirus.org).
3. Authenticate Credentials: Log in using your network username (not your full email) and your Active Directory password.
4. MFA Push Request: Approve the secondary push notification sent to your registered Microsoft Authenticator application.
5. Launch Your Workspace: Once authenticated, select the virtual application or desktop environment you need to launch, such as Epic Hyperspace, PACS imaging software, or internal administrative folders.

Aspirus Employee Portal Comparison: Email, Workday, and Patient Portal Access

To assist employees and contractors in navigating the distinct digital portals operated by Aspirus Health, the comparison table below outlines the specific functions, audiences, and authentication methods for each primary system.

Troubleshooting Common Login Errors and Access Failures

Login issues can disrupt clinical workflows and administrative tasks. Use the following troubleshooting pathways to resolve the most common remote access errors.

1. Error: "Your Account is Locked"

• Cause: This typically occurs after five consecutive incorrect password attempts. This mechanism protects the network against brute-force attacks.
• Resolution: Wait 15 minutes for the automated lockout security timer to cool down, then try again. If you have forgotten your password, utilize the Aspirus Self-Service Password Reset (SSPR) portal, provided you have previously registered your security questions and backup phone number.

2. Error: "MFA Notification Not Received"

• Cause: Poor cellular network coverage, lack of internet connection on your mobile device, or desynchronization of the device's internal clock.
• Resolution:
  
  
  • Ensure your phone has a stable Wi-Fi or cellular connection.
  • Open the Microsoft Authenticator app manually to see if a pending notification is waiting.
  • If no prompt appears, select "Use a verification code instead" on your browser login page, then enter the rolling 6-digit passcode displayed inside your Authenticator app.

3. Error: "Citrix Receiver/Workspace Not Detected"

• Cause: Missing, outdated, or corrupted Citrix client software on your personal computer.
• Resolution: Uninstall any legacy Citrix clients, restart your device, and download the latest version of Citrix Workspace directly from the official Citrix website. Avoid running Citrix inside basic browser extensions; use the desktop application for full compatibility with clinical peripherals.

4. Contacting the Aspirus IT Service Desk

If you are unable to resolve authentication issues on your own, contact the internal IT support team.

• Internal Phone: Extension 72300
• External Phone: 715-847-2300 (Wausau area and external calls)
• Verification Requirement: When calling, be prepared to verify your identity by providing your full legal name, employee ID number, department, and facility location. The IT service desk will never ask you to read your password aloud.

Crucial Security Guidelines for Remote Healthcare Access

Protecting patient confidentiality and securing institutional data is the legal responsibility of every employee under the Health Insurance Portability and Accountability Act (HIPAA). All remote access activities are logged and monitored by the Aspirus Information Security Department.

Best Practices for Remote Work in Healthcare

Secure Your Endpoint Device Never access corporate emails or patient records from shared public terminals, such as those in libraries or hotels. Ensure that your home computers run actively updated operating systems with commercial-grade antivirus software.

Maintain Visual Privacy If you are reviewing clinical communications or accessing Epic from a home or public setting, position your screen so that family members, guests, or bystanders cannot view patient records, employee directory information, or internal operational metrics.

Identify Phishing Attempts Aspirus IT security will never send emails asking you to confirm your password, verify your account details to prevent deletion, or click on links to "update your mailbox quota." Always report suspicious external emails using the "Report Phishing" button inside Outlook.

Frequently Asked Questions About Aspirus Employee Portals

How do I change my Aspirus network password when working remotely?

You can update your corporate credentials through the self-service portal online. If you are already logged into your Aspirus Microsoft 365 account on a browser, click your profile picture in the top-right corner, select "View Account," and click on "Password" to update your credentials. This password update will automatically sync across all integrated applications, including your email, Citrix Gateway, and Workday portal.

Can I access my Aspirus email on my personal smartphone or tablet?

Yes, but you must enroll your mobile device in the Aspirus Mobile Device Management (MDM) framework or use approved containerized apps such as Microsoft Outlook. This ensures that any clinical data stored within emails remains encrypted, and allows the organization to remotely wipe corporate data in the event your mobile device is lost or stolen.

What should I do if my mobile phone with the Authenticator app is lost or damaged?

If you no longer have access to your registered multi-factor authentication device, you must contact the Aspirus IT Service Desk at 715-847-2300. A support technician will verify your identity, clear your old MFA registrations, and provide a temporary bypass code or guide you through registering a new phone or tablet.

How do retirees or former employees access their tax documents and final paystubs?

Former employees can access historic tax forms, paystubs, and benefits documentation through a dedicated, external version of the Aspirus Workday Portal. Access to Microsoft 365 Webmail, Teams, and Citrix-based clinical systems is terminated immediately upon the official separation of employment to safeguard corporate networks and patient data.

Is my MyAspirus patient account the same login as my Aspirus employee email?

No. Your clinical employee credentials (used to access work email and EHR files) are completely separate from your personal MyAspirus account. If you receive medical care from the Aspirus Health system, you must maintain a standard patient account with a unique personal email address and a separate password. Mixing professional administrative logins with personal medical records is strictly prohibited.