Navigating The OSUMC OneSource Portal: A Comprehensive Guide For Wexner Medical Center Staff And Students

Accessing the OSUMC OneSource intranet requires a secure MedCenter ID and synchronized Duo Multi-Factor Authentication to ensure HIPAA-compliant data handling across the clinical environment. This centralized hub integrates Electronic Health Records via IHIS, administrative tasks through Workday, and department-specific resources into a single, high-availability interface designed for medical efficiency.

Prerequisites for Accessing the Wexner Medical Center Internal Ecosystem

Before attempting to log into the OSUMC OneSource portal, users must ensure their digital identity is properly provisioned within the Ohio State University Wexner Medical Center (OSUMC) directory. This system is distinct from the general university "dot number" system, although they are frequently synchronized for a seamless Single Sign-On (SSO) experience. Preparation involves more than just having a username; it requires a specific hardware and software configuration to maintain the integrity of Protected Health Information (PHI).

The following checklist identifies the essential components required for a successful connection, whether you are on-campus or utilizing a remote connection.

• Mandatory Credentials and Identity Management

  
  
  
  • Active MedCenter ID: This is your primary institutional identifier (e.g., smith.1234 or a specific alphanumeric medical center ID).
  • BuckeyePass (Duo Security) Enrollment: A registered mobile device or hardware token is required for all off-network and high-security internal logins.
  • Institutional Email Address: An active @osumc.edu or @osu.edu email account linked to the medical center's Active Directory.

• Hardware and Software Specifications

  
  
  
  • Browser Requirements: Microsoft Edge (Chromium-based), Google Chrome, or Apple Safari with JavaScript and cookies enabled.
  • Citrix Workspace/Receiver: Necessary for launching virtualized clinical applications like IHIS (Epic) from the OneSource dashboard.
  • Virtual Private Network (VPN): The Cisco AnyConnect Secure Mobility Client is required for specific administrative deep-links that reside behind the primary firewall.

• Benchmarking Access and Performance

  
  
  
  • Initial Setup Time: Approximately 15 to 30 minutes for first-time MFA synchronization and browser configuration.
  • Connection Thresholds: Minimum 5 Mbps downstream for stable portal navigation; 25 Mbps recommended for fluid IHIS/Epic remote operation.
  • Security Compliance: Mandatory password rotation occurs every 90 to 180 days depending on the specific user role and data access level.

Executing a Secure Login and Optimizing Your OneSource Dashboard Workflow

The transition into the OneSource environment is a multi-stage process designed to verify identity and authorize access to sensitive clinical and administrative databases. Following these steps ensures that you bypass common authentication redirects and land directly on the relevant resource page.

Step 1: Initial Authentication and Credential Input

Begin by navigating to the primary OneSource URL through a secure browser session. It is recommended to use an Incognito or Private window if you are on a shared workstation to prevent credential caching. When the login screen appears, enter your MedCenter ID. Note that some internal systems may require the "OSUMC" prefix before the username (e.g., OSUMC\smith1234), particularly when logging into the Citrix gateway or legacy departmental servers.

Pro-Tip: If the system rejects your credentials despite them being correct, check if your "dot number" password has expired on the main university site, as this often triggers a lock on the medical center side of the network.

Step 2: Multi-Factor Authentication (MFA) Verification

Once your username and password are accepted, the system will trigger a BuckeyePass request via Duo Security. You will receive a push notification, a phone call, or be required to enter a six-digit passcode from a hardware token. This step is non-negotiable and serves as the primary defense against unauthorized PHI access.

1. Open the Duo Mobile app on your registered device.
2. Approve the "Push" request or generate a bypass code.
3. Ensure the "Remember me for 15 hours" option is selected ONLY if you are on a dedicated, private, and encrypted device.

Step 3: Navigating the Clinical and Administrative Tiles

Upon successful login, the OneSource homepage presents a grid of "tiles" or a sidebar menu categorized by function. The layout is designed to prioritize the most frequently used applications. To optimize your workflow, locate the "My Favorites" or "Quick Links" section.

• IHIS (Epic): This is the primary portal for clinical documentation, patient charts, and order entry. Launching this usually opens a Citrix session.
• Workday: Used for human resources tasks, including viewing paystubs, requesting time off, and managing benefits.
• Health Sciences Library: Provides instant access to clinical decision support tools like UpToDate, DynaMed, and various medical journals.
• PolicyStat: The repository for all institutional policies, clinical protocols, and safety standards.

Step 4: Personalizing the User Experience for Clinical Efficiency

OneSource allows users to customize their dashboard to reduce the number of clicks required to reach specific departmental tools. Users should navigate to the "App Gallery" within the portal to add specific tools such as the "Radiology PACS Viewer" or "Lab Results Portal" to their primary view.

Warning: Never leave a OneSource session unattended. The system has an automatic timeout period (usually 15-30 minutes of inactivity), but manual logout is the only way to guarantee session termination and compliance with HIPAA security standards.

Step 5: Remote Access via the Citrix Gateway

For staff working from home or off-site, OneSource acts as a springboard into the Citrix virtual desktop environment. After clicking a clinical app icon, a ".ica" file may download. Ensure that Citrix Workspace is pre-installed on your machine to automatically open this file and launch the virtualized environment. This allows you to interact with clinical software as if you were on a hospital workstation, with all data remaining on the secure OSUMC servers rather than your local hard drive.

System Compatibility and Application Categorization Matrix

To ensure the best user experience, it is vital to understand which applications are accessible through standard web protocols and which require specialized virtualization software. The following table outlines the technical parameters for the most commonly accessed tools within the OneSource ecosystem.

Resolving Authentication Failures and Application Timeouts

Technical disruptions can occur due to network latency, credential expiration, or server-side maintenance. Identifying the root cause of an error is the first step toward a resolution.

• Scenario 1: Duo Push Notification Not Received

  
  
  
  • Root Cause: The mobile device has lost internet connectivity, or the Duo account has become "orphaned" after a device restore or phone number change.
  • Actionable Fix: Open the Duo app and manually generate a "Passcode" by clicking the down arrow next to the "Ohio State University" entry. If this fails, visit the BuckeyePass management page to reactivate the device or contact the IT Service Desk at 614-293-HELP.

• Scenario 2: Citrix Application Fails to Launch

  
  
  
  • Root Cause: The browser is attempting to download the launch file rather than executing it, or the local Citrix Workspace installation is corrupted/outdated.
  • Actionable Fix: Clear the browser cache and cookies. If the issue persists, uninstall the current Citrix client and download the latest version of Citrix Workspace from the official Citrix website. Ensure that "Workspace" is selected rather than "Receiver" for better compatibility with Windows 11 and macOS Monterey/Ventura.

• Scenario 3: "Access Denied" Error on OneSource Home Page

  
  
  
  • Root Cause: The user’s MedCenter account has been flagged for a security review or a mandatory training module (e.g., HIPAA annual update) has expired.
  • Actionable Fix: Log into BuckeyeLearn to check for overdue training assignments. If all training is current, contact the department's Access Coordinator to ensure that the MedCenter ID's "Active Directory" groups have not been modified or removed.

• Scenario 4: Performance Lag in IHIS/Epic Remote Sessions

  
  
  
  • Root Cause: High network jitter or insufficient local bandwidth, often caused by simultaneous high-bandwidth activities (like video streaming) on the same home network.
  • Actionable Fix: Connect the workstation directly to the router via Ethernet rather than using Wi-Fi. Disable any local VPNs (such as those for personal privacy) that might be conflicting with the OSUMC Cisco AnyConnect client.

Frequently Asked Questions

How do I reset my OSUMC OneSource password if I am locked out?

Password management for OneSource is handled through the "MyTools" or "Identity Management" portal. If you are unable to log in, you must use the self-service password reset tool provided by the university, which requires you to answer your pre-set security questions or verify your identity via Duo. If self-service fails, a call to the IT Help Desk with your employee ID number ready is the only alternative for a manual reset.

Can I access OneSource on my mobile device?

Yes, OneSource is accessible via mobile browsers; however, the interface is optimized for desktop use. For clinical applications, it is highly recommended to use the mobile-specific apps like "Epic Haiku" for physicians or "Epic Rover" for nursing staff, which are configured to work with the OSUMC backend while providing a touch-friendly interface.

Why does my session keep timing out every few minutes?

Session timeouts are a security feature dictated by the "Inactivity Timeout Policy." If you find the timeout is occurring too rapidly (e.g., under 5 minutes), check if you have multiple OneSource tabs open. The system tracks activity across all tabs, and an idle tab in the background can sometimes trigger a global logout for the browser session.

What should I do if a specific "Tile" is missing from my dashboard?

If a tool you previously used has disappeared, it usually indicates a change in your "Security Class" or departmental role. This can happen during a transfer between units. You should contact your manager to verify that your "Application Access Request" (AAR) is still valid and has not expired or been revoked.

Is a VPN always required for OneSource access?

A VPN is not strictly required to view the primary OneSource homepage and common web-based tools like Workday or Email. However, a VPN (Cisco AnyConnect) is mandatory for accessing "Behind the Firewall" resources such as specific departmental file shares (the S: or U: drives) and certain legacy clinical databases that do not utilize the Citrix gateway.

Maximize Your Clinical Efficiency

Mastering the OneSource portal is essential for providing high-quality patient care and maintaining administrative accuracy within the Ohio State University Wexner Medical Center. Regularly updating your security credentials and optimizing your dashboard layout will ensure that you spend less time navigating software and more time focused on clinical excellence.