Understanding TRICARE Apple App Site Association (AASA)

*Disclaimer: TRICARE.com is an independent reference site and is not affiliated with the Department of Defense or the official TRICARE program. For official policy, please visit TRICARE.mil.*

## Quick answer The Apple App Site Association (AASA) file is a technical configuration file hosted on TRICARE contractor websites (like Humana Military, TriWest, or Express Scripts) that allows their official mobile apps to link directly to specific account features. It ensures that when you click a link for a claim or a provider search on your iPhone, the phone opens the secure TRICARE-related app instead of a web browser.

## In detail While the average beneficiary won't interact with the code of an AASA file, it is the invisible backbone of the "Universal Link" system used by TRICARE regional contractors. As of 2026, with **TriWest Healthcare Alliance** managing the West Region and **Humana Military** managing the East, these files are critical for ensuring HIPAA-compliant transitions between email notifications and secure mobile apps.

### How it works for TRICARE digital tools When a contractor like Express Scripts (the pharmacy manager) sends you a text alert about a prescription refill, that link needs to be secure. The AASA file, hosted at `your-contractor-domain.com/.well-known/apple-app-site-association`, tells your iPhone: "If the user clicks a link from this domain, open the Express Scripts Pharmacy app immediately."

### Key Contractors and Mobile Integrations (2026) * **West Region (TriWest):** Following the T-5 contract transition on January 1, 2025, TriWest utilizes AASA files to sync their "TriWest Self-Service" mobile features with their web portal. * **East Region (Humana Military):** Uses these files to streamline access to the Humana Military app, allowing beneficiaries to view authorizations and referrals directly from their mobile OS. * **Pharmacy (Express Scripts):** Utilizes Universal Links to move users from "Medicine Cabinet" email reminders into the secure app environment.

### Security Benefits The AASA file is a security requirement. Unlike older "Custom URL Schemes," AASA files cannot be hijacked by malicious apps. Because the file must be hosted on the contractor’s actual verified domain (e.g., `humanamilitary.com`), your iPhone knows with 100% certainty that it is sending your sensitive TRICARE health data to the legitimate contractor app and not a spoofed version.

## Who this applies to * **iPhone and iPad Users:** Anyone using iOS/iPadOS to manage their TRICARE East, West, or Pharmacy benefits via mobile apps. * **TRICARE Select & Prime Beneficiaries:** Specifically those who use contractor portals to check 2026 enrollment fees or catastrophic caps. * **Active Duty Service Members (ADSMs):** Those managing referrals and authorizations through the Humana Military or TriWest mobile interfaces.

Common scenarios

### Scenario 1: Checking a Referral in the West Region A TRICARE Prime enrollee in California (West Region, managed by **TriWest**) receives an email stating their specialty care referral is ready. They click the link on their iPhone. Because of the TriWest AASA file, the phone skips the Safari browser and opens the **TriWest** app directly to the "Authorizations" page, saving the user from logging in twice or navigating through a mobile-unfriendly website.

### Scenario 2: Pharmacy Refills with Express Scripts A retiree using TRICARE For Life receives a notification that their maintenance medication is low. They click the "Refill Now" button in the email. The **Express Scripts** AASA file ensures the link opens the Express Scripts mobile app. The user pays their 2026 copay (e.g., $16 for a 90-day supply of a generic formulary drug via Home Delivery) and completes the order in seconds.

## Related terms * **Universal Links:** The Apple technology that uses AASA files to connect websites to apps seamlessly. * **T-5 Contract:** The 5th generation of TRICARE contracts, which began in 2025 and introduced TriWest as the West Region contractor. * **Beneficiary Web Enrollment (BWE):** The central portal used to manage TRICARE enrollment, which often links out to contractor sites. * **Express Scripts:** The national manager for the TRICARE Pharmacy Benefit. * **HIPAA:** The federal law protecting health information, which necessitates the security provided by AASA-verified links.

## Sources * **TRICARE.mil:** The official Department of Defense site for health benefit information (https://www.tricare.mil). * **Humana Military:** The contractor for the TRICARE East Region (https://www.humanamilitary.com). * **TriWest Healthcare Alliance:** The contractor for the TRICARE West Region under T-5 (https://www.triwest.com). * **Apple Developer Documentation:** Technical specifications for the Apple App Site Association file (https://developer.apple.com).