Medicaid credentialing happens in two layers, state enrollment and managed care plan credentialing, and in most states you need both before you can treat Medicaid members. There is no single federal application, which is why guides that treat it like Medicare send so many providers to the wrong place first.
This guide explains who you apply to, what the state checks, how managed care plans fit in, and where applications get stuck. If you have already handled Medicare enrollment, some of this will look familiar, and some of it will not.
Key Takeaways
- Each state runs its own Medicaid program, but federal rules set the minimum screening and enrollment standards.
- States must screen and enroll managed care network providers, so a plan contract alone does not replace state enrollment.
- Each Medicaid managed care plan also credentials on its own, so you may submit several applications.
- States must revalidate providers at least every five years.
- Screening level depends on risk. Moderate and high risk providers face site visits, and high risk ones also need fingerprints.
- No federal timeline exists, so ask the state and each plan how long they are taking right now.
Medicaid is Different From Medicare
Medicare is a federal program with one enrollment system. Medicaid is run state by state, with its own portal, forms, and processing times. The federal rules in 42 CFR Part 455 set the floor for how states screen and enroll providers, but states decide the rest.
Many people use credentialing and enrollment interchangeably, and they are not the same thing. Our post on the differences between credentialing, privileging, and enrollment sorts out the terms. In Medicaid, the state does the enrollment and screening, and managed care plans do their own credentialing on top of it.
The State Enrollment Layer
The state Medicaid agency enrolls you and screens you. Federal rules require states to verify licenses, run database checks, and revalidate every provider at least every five years. Screening happens at three levels, and the level depends on risk.
- Limited risk providers get provider-type and license checks plus database checks before and after enrollment.
- Moderate risk providers get all of that plus site visits.
- High risk providers get all of that plus a criminal background check and fingerprints. Owners with a 5% or greater interest are included.
Fingerprints are due within 30 days of a request, and missing that deadline can lead to denial or termination. States may also raise a provider to the high risk level after events such as a payment suspension for credible fraud allegations. An application fee applies in some cases, but individual physicians and non-physician practitioners are exempt, as are providers already enrolled in Medicare or another state’s program.
If you are already enrolled in Medicare, the state may rely on that screening. That is a good reason to finish Medicare first, using our guide to getting in-network with Medicare for the participation side.
The Managed Care Plan Layer
Most Medicaid members are in managed care, so most providers also need a contract with the plans. Each plan runs its own credentialing to confirm you are qualified, and each has its own application and timeline. A state with five active plans may mean five separate applications.
The state requirement does not go away, though. Federal managed care rules say the state must screen and enroll network providers, and a plan’s network agreement does not satisfy the agreement you need with the state. Plans may sign provisional network agreements while your state enrollment is pending, but only for up to 120 days, and they must end the agreement if the state cannot enroll you. A plan can also decline to contract with a provider the state has enrolled, if you do not meet the plan’s own criteria.
Plans we have written guides for include Molina Healthcare, CareSource, Elevance Health, and UnitedHealthcare. Many plans accept a CAQH profile, so keep yours current, and see our post on what a CAQH error costs in lost revenue for a sense of why.
What to Gather Before You Apply
Start with a package you can reuse across the state and every plan.
- National Provider Identifier. Our post on the National Provider Identifier shows how to get one.
- Current state license and DEA registration, if you prescribe controlled substances
- Board certification, education, and training records
- Malpractice insurance details that meet your state’s minimums
- Work history, with any gaps explained
- Disclosures for malpractice claims, license actions, and sanctions
- Ownership and control information, including anyone with a 5% or greater interest
- A current CAQH profile, where plans accept one
Federal rules require states to check the exclusion databases at least monthly, so an omission tends to come to light. Disclose, and explain.
How Long Medicaid Credentialing Takes
There is no federal timeline for Medicaid enrollment or for plan credentialing. Some states move quickly, and others take far longer, especially where several plans and a busy state agency are involved. The 60 to 180 days quoted in older guides was a broad estimate, not a rule.
Our average credentialing turnaround across payers is about 85 days. For Medicaid, ask the state and each plan for their current turnaround before you promise a start date to your staff or your patients. Do not schedule Medicaid members until you have written confirmation of your effective date.
Site Visits and Fingerprinting
Moderate and high risk providers face pre-enrollment and post-enrollment site visits, and enrolled providers must allow unannounced inspections of all locations by CMS or the state. Treat your office as ready to be inspected at any time, with accessible entrances, posted signage, and records in order.
If you are in the high risk category, or you have an owner with a 5% or greater interest, schedule fingerprinting as soon as the state asks. The 30-day window goes quickly.
Common Delays and How to Avoid Them
Most Medicaid delays come from a handful of errors. Our post on common credentialing errors covers the wider list.
- Applying only to a plan and assuming that covers state enrollment.
- An incomplete application or a missing signature.
- Expired licenses, DEA registrations, or insurance while the file is pending.
- Names, dates, and addresses that do not match across documents.
- Missing the 30-day fingerprinting window.
- Unresponsive references or former employers.
Revalidation and Recredentialing
The state must revalidate you at least every five years, and plans run their own recredentialing, commonly on a three-year cycle in line with the NCQA standard. Both cycles run in parallel, so track the dates separately. Our guide to provider recredentialing shows how to stay ahead of them.
Report changes to your practice promptly to the state and every plan. A lapse in either layer can stop payment for Medicaid members.
Get Credentialed with Medicaid FAQ
How is Medicaid credentialing different from Medicare enrollment?
Medicare has one federal enrollment system. Medicaid is run by each state, with its own application, requirements, and timelines, and managed care plans add their own credentialing on top. Federal rules in 42 CFR Part 455 set minimum screening standards.
Do I have to apply to the state and to each Medicaid managed care plan?
Usually, yes. Federal rules say the state must screen and enroll managed care network providers, and a plan’s network agreement does not replace the agreement with the state. Each plan also credentials on its own and has its own application.
How long does Medicaid credentialing take?
There is no federal timeline. It varies by state and plan, so ask each one for its current turnaround. Our own average credentialing turnaround across payers is about 85 days.
How often does Medicaid revalidate providers?
States must revalidate providers at least every five years. Managed care plans run their own recredentialing, commonly on a three-year cycle.
Do Medicaid providers need a site visit?
Moderate and high risk providers face pre-enrollment and post-enrollment site visits. Enrolled providers must also allow unannounced inspections of all locations by CMS or the state.
Are fingerprints required for Medicaid enrollment?
For high risk providers and for owners with a 5% or greater interest, yes. Fingerprints are due within 30 days of the state’s request, and missing the deadline can lead to denial or termination.
Is there an application fee for Medicaid enrollment?
In some cases. Individual physicians and non-physician practitioners are exempt, as are providers already enrolled in Medicare or another state’s program, and states collect the fee before signing a provider agreement.
What documents do I need for Medicaid credentialing?
Have your NPI, license, DEA registration if you prescribe controlled substances, board certification, training records, malpractice insurance, work history, disclosures, and ownership information ready. Many plans also accept a CAQH profile.
Summary: Where Medwave Fits in Medicaid Credentialing
Medicaid credentialing rewards a clear map. Enroll with the state, credential with each plan, and calendar both revalidation cycles. Most delays come from skipping a layer or missing a deadline.
At Medwave, we handle billing, credentialing, and payer contracting for practices, including state Medicaid enrollment and plan applications. Your medical billing and payer contracting depend on those approvals landing, and our video on credentialing with Medicare and Medicaid shows how we approach it. Contact us below to talk through your state Medicaid enrollment.
Co-Founder and COO of Medwave, bringing more than 25 years of hands-on experience in healthcare revenue cycle management, payer contracting, and medical credentialing.