You open your browser, type in the address of the AP-HP messaging service, and the page remains blank or displays a cryptic message. The problem does not always stem from your credentials. Several connection errors to the AP-HP messaging service originate from browser configuration, a session left open elsewhere, or an outdated URL saved in your favorites.
Disabled cookies and frozen Citrix session: two invisible blocks
Have you ever seen the message “Cookies Disabled” when trying to access the portal? This block has nothing to do with your password. The Citrix NetScaler gateway, which protects access to the messaging service, stores a session identifier in a cookie. If your browser refuses cookies, the page cannot identify you and displays this error before even offering a login field.
To fix the problem, open your browser settings, look for the “Privacy” or “Cookies” section, and allow at least cookies from the site messagerie.aphp.fr (or courriel.aphp.fr). On Chrome, the path is Settings > Privacy and security > Third-party cookies. On Firefox, check that enhanced tracking protection is not set to “Strict”.
The other common block is the Citrix session left open on another workstation. The typical symptom: the page displays “Resuming logon, please wait” in a loop, never reaching completion. This case often affects agents who move from one department to another throughout the day.
The previous session, not properly closed, prevents any new connection. The solution is to close the remote session from the original workstation or, if that workstation is no longer accessible, to contact local IT support to force the disconnection.
A detailed article offers a remote diagnosis ap-hp on the Hebdo Linux site that covers these scenarios with step-by-step screenshots.
URL error: courriel.aphp.fr replaces messagerie.aphp.fr
Many AP-HP staff have saved messagerie.aphp.fr in their favorites years ago. However, courriel.aphp.fr is now the reference address for webmail. The old URL may still work through redirection, but this redirection is not always reliable. The result: a blank page, an invalid security certificate, or a browser error message.
Check the URL in the address bar. If it starts with messagerie.aphp.fr, replace your favorite with courriel.aphp.fr. This simple action eliminates a significant portion of connection errors reported by new interns and agents moving between sites.
Security certificate and outdated browser
An error like “Your connection is not private” or “NET::ERR_CERT_DATE_INVALID” indicates a problem with the SSL certificate. Two possible causes: either your device’s clock is out of sync (check the date and time in Windows or macOS settings), or your browser version no longer recognizes the server’s certificate.
Older browsers do not support recent certificates. Update Chrome, Firefox, or Edge to the latest available version. On a hospital workstation where you do not have installation rights, report the issue to the IT department: the update is the responsibility of the system administrator.
VPN connection from outside: specific errors
From your home or while traveling, access to the AP-HP messaging service often goes through a VPN. VPN connection errors have their own symptoms, distinct from those of webmail.
- The VPN client displays “server unreachable”: check that your Internet connection is working by opening another site. If everything is normal on the network side, the AP-HP VPN server may be temporarily unavailable, especially during scheduled maintenance on weekends.
- VPN authentication fails even though your credentials are correct: the problem often arises from multi-factor authentication (MFA) via Microsoft Authenticator. If the app does not display the validation notification, force a refresh or manually open Authenticator to enter the six-digit code.
- The VPN connects but webmail remains inaccessible: once the VPN tunnel is active, use courriel.aphp.fr and not the old URL. Some VPN profiles automatically redirect to a Citrix portal, which can create confusion with direct webmail access.
MFA authentication and blocked notification
Strong authentication via Microsoft Authenticator is mandatory for remote access. When the push notification does not appear on your phone, several avenues should be checked.
First, ensure that the Authenticator app has permission to send notifications in your device settings. On Android, “Do Not Disturb” and “Battery Saver” modes frequently block these alerts. On iPhone, check the settings in Notifications > Microsoft Authenticator.
Synchronize your phone’s clock: a delay of a few minutes is enough to invalidate the time-based codes generated by the app. Enable the automatic time setting in the system settings.
Expired AP-HP password or locked account
The unique AP-HP password has a limited validity period. After this period, the connection fails without a very explicit message: the portal may simply display “Incorrect credentials” without specifying that the password has expired.
To reset it, go to the AP-HP password management portal accessible from the internal network. If you are outside, the VPN must be active before starting the procedure. Three failed attempts lock the account: in this case, only IT support can unlock access.
Remember to update the password saved in Outlook on your desktop and in the mobile app. An old password stored in an email client attempts repeated automatic connections, which can lock your account before you even intervene.
The majority of connection errors to the AP-HP messaging service can be resolved with three checks: the correct URL (courriel.aphp.fr), enabled cookies, and an up-to-date password. For blocks related to Citrix or the VPN, local IT support remains the quickest recourse, especially if a remote session needs to be closed on their end.