Medicaid credentialing is the enrollment we are most often called in to rescue. It is nearly always the same story. The practice enrolled with the state program, received an approval, started seeing patients, and then discovered that the managed care plans those patients are actually enrolled in were a separate application nobody filed.
For the work itself, see our medical credentialing services.
How to get credentialed with Medicaid, in short
- Enroll with your state Medicaid agency through its provider enrollment portal. You get a Medicaid provider number.
- Pass the screening for your provider type: license and database checks, and for higher-risk types a site visit or fingerprinting.
- Credential with each Medicaid managed care plan you want to see members from. Most use CAQH.
- Sign each plan's contract and confirm the effective date before you book members.
- Diary revalidation, at least every five years for the state, plus each plan's re-credentialing cycle.
Two steps, always
State first, then every plan
Step one: enroll with the state Medicaid agency. This gets you a Medicaid provider number and lets you bill fee-for-service Medicaid.
Step two: enroll separately with each managed care organization contracted in your region. The large majority of Medicaid members are in managed care, so step two is where most of your actual patients are. Finishing step one and stopping means you are enrolled with a program that covers a minority of the population you intended to serve.
Most states require the state enrollment to be complete before an MCO will process your application, so the steps are sequential rather than parallel. Budget for both.
Screening levels
Federal rules put every enrolling provider into a risk category, and the category determines what you have to go through:
| Risk level | Typically includes | What is required |
|---|---|---|
| Limited | Physicians, most practitioners, group practices | License verification, database and exclusion checks |
| Moderate | Hospices, some agencies, independent testing facilities | The above plus unannounced site visits |
| High | Newly enrolling DMEPOS suppliers and home health agencies | The above plus fingerprint-based criminal background checks on owners |
Application fees apply to institutional providers in many states. Knowing your category up front tells you whether to plan for 60 days or 120.
Virginia
We are based in Fairfax, so Virginia is the program we work in most. Virginia Medicaid is administered by the Department of Medical Assistance Services, with most members covered through its managed care program and a set of contracted health plans delivering the benefit.
- Enroll with the state program through the provider enrollment portal first.
- Then enroll with each contracted managed care plan operating in your region. That is where the members are.
- Behavioral health services have their own service authorization and registration requirements, which are additional to enrollment.
- Providers serving members across the DC metro area often need Maryland and District enrollment as well; each is a separate program with separate rules.
Program names, plan rosters and portals change, so we confirm current requirements at the point of filing rather than working from a saved checklist.
Revalidation
Medicaid requires revalidation at least every five years, and some states more often for higher-risk categories. As with Medicare, the notice goes to the contact on file and deactivation for a missed deadline stops payment rather than reducing it. We track the dates.
Behavioral health and ABA
Medicaid is the largest payer for behavioral health and for ABA, and it is the strictest. Depending on the state you may need named registration of every technician, documented supervision ratios, a diagnosis from an approved provider type before services begin, and service authorization separate from enrollment.
- Therapists and counselorsInsurance credentialing for therapists
- ABA agenciesABA credentialing services RBT registration and state program differences
What causes delays
- Assuming the state enrollment covers the managed care plans
- Ownership disclosure sections left incomplete: these are scrutinized closely
- Address mismatches between the application, W-9, license and NPPES
- Missing a scheduled site visit for a moderate or high risk category
- Filing before the state enrollment is finalized, so the MCO rejects on sequence
The managed care step people forget
This is the single most expensive misunderstanding in Medicaid credentialing, and it costs practices months. Getting your state Medicaid number is not the finish line. In most states it is closer to the halfway point.
Most Medicaid members are not covered directly by the state any more. They are enrolled with a managed care organization, an MCO, which is a private health plan paid by the state to run their care. Your state number makes you eligible to work with those plans. It does not put you in any of them.
So the sequence is:
- Enroll with the state Medicaid program and receive your Medicaid ID.
- Apply separately to every MCO whose members you intend to see.
- Wait for each one to credential you and issue a contract with an effective date.
Each MCO runs its own timeline, and they do not run in parallel with the state. Plan for the state enrollment first and the plans after it, because most MCOs will not start until your state ID exists.
What this looks like when it goes wrong: a practice completes state enrollment, starts seeing Medicaid patients, and discovers three months later that most of those patients belong to an MCO the practice never applied to. Those claims deny as out of network, and Medicaid patients cannot be balance billed for them. The revenue is simply gone.
Check which MCOs operate in your county before you start, and check what share of local members each one holds. In many markets two plans carry most of the volume and the rest are not worth the paperwork.
Ordering, referring and prescribing
There is a second kind of enrollment that catches specialists and hospital based physicians. If you order tests, refer patients, or prescribe for a Medicaid member, your details go on somebody else's claim even when you never bill Medicaid yourself.
States require those ordering and referring providers to be enrolled, usually through a lighter registration rather than a full application. When they are not, the claim denies for the laboratory, the imaging center or the pharmacy, not for the person who ordered it.
Two groups get caught by this regularly. Hospitalists and emergency physicians who never send a Medicaid claim of their own, and retiring physicians whose enrollment lapses while their prescriptions are still being filled. If your denials mention an ordering or referring provider who is not enrolled, that is what happened.
Screening levels in practice
Federal rules sort every applicant into limited, moderate or high risk, and the level decides how much scrutiny you get. The state does not negotiate this with you and you cannot ask to be moved.
- LimitedPhysicians, most practitioner types and established institutional providers. License and database checks, and that is broadly it.
- ModerateAdds an unannounced site visit. Home health, some behavioral health agencies and several supplier types sit here.
- HighAdds fingerprint based criminal background checks for everyone with a five percent or greater ownership stake. Newly enrolling home health and DMEPOS suppliers commonly land here.
Two things follow from this. A high risk category means your owners personally have to attend a fingerprinting appointment, which nobody schedules until the letter arrives and which then adds weeks. And a provider who has been revalidated before can be moved up a level after an adverse event, so last time is not a guide.
Site visits are unannounced by design. The practical preparation is dull: the address on the application has to match the sign on the door, someone has to be there during posted hours, and the posted hours have to be true.
Out of state and border practices
Medicaid is run state by state, so a practice near a state line often needs to enroll twice. A member keeps their own state's Medicaid when they cross the line for care, and the plan that pays is theirs, not yours.
Most states have an out of state provider enrollment route that is lighter than the full one, and some limit it to emergency care or to services not available in the member's own state. It is worth checking before you treat, because the answer varies more between states than practices expect.
This matters most in the Washington DC area, where Virginia, Maryland and the District are all within a short drive and a practice can easily hold patients from all three.
Keeping it once you have it
Medicaid enrollment is not permanent. States revalidate providers at least every five years, and the notice goes to the address and email on your enrollment record, which for many practices is a person who left.
Miss it and you are disenrolled rather than warned. Claims stop, and reinstatement is a new application rather than a phone call. The gap is generally not payable.
Your MCO contracts have their own re-credentialing cycle as well, usually every three years, and it runs independently of the state clock. A practice can be current with the state and lapsed with the plan that actually pays most of its claims.
The practical answer is a single calendar that holds the state revalidation date and every MCO date beside it, owned by somebody who will still be there. We keep that list for the practices we credential, and we start work on a revalidation at ninety days, not at the deadline.
Medicaid credentialing requirements
The details are set state by state, but the core requirements are much the same everywhere:
- An active NPI, and a type 2 NPI for a group or facility.
- A current license in that state for a provider type its Medicaid program covers.
- No exclusion on the federal or state exclusion lists, and no termination from Medicare or another state's Medicaid.
- Ownership and control disclosures for groups and facilities.
- An application fee where it applies, usually for institutional providers rather than individual practitioners.
- For managed care, a complete and attested CAQH profile with each plan authorized.
If you would rather hand this off, our medical credentialing services include state Medicaid enrollment and every managed care plan behind it.
Medicaid credentialing FAQs
How long does Medicaid credentialing take?
Plan for 60 to 120 days for state enrollment, depending on your screening level. Managed care plans enroll you separately afterwards, and most will not start until the state step is complete.
Is state Medicaid enrollment enough to see Medicaid patients?
Usually not. Most Medicaid members are in managed care, so you also have to enroll with each managed care organization in your region. Stopping after the state step is the most common reason claims still deny.
How often do I have to revalidate with Medicaid?
At least every five years, and some states more often for higher-risk categories. The notice goes to the contact on your enrollment record, so keep it current.
Can therapists and ABA providers enroll in Medicaid?
Yes, though behavioral health and ABA services often carry extra registration and authorization requirements on top of enrollment. See credentialing for therapists and ABA credentialing.
What are the requirements for Medicaid credentialing?
An active NPI, a current license in that state, no exclusion or termination from a federal health program, ownership disclosures for groups, any application fee that applies, and a complete CAQH profile for the managed care plans.
Do Medicaid managed care plans use CAQH?
Most do. The state enrollment uses the state's own portal, but the managed care plans usually read credentials from CAQH ProView, so keep it attested every 120 days and authorize each plan.
Is there a fee to enroll in Medicaid?
Usually not for individual practitioners. Institutional providers generally pay a federally set application fee, though a state may accept a fee already paid to Medicare or another state.
Can I enroll in Medicaid in more than one state?
Yes, and if you treat members of another state's program you often must. Each state is a separate enrollment, and each state's managed care plans credential you separately again.
Do I need Medicaid enrollment to order or refer?
Yes. Practitioners who order, refer or prescribe for Medicaid members must be enrolled, even if they never bill Medicaid themselves. Many states offer a shorter ordering and referring enrollment for that purpose.
Free enrollment check
Tell us your state, provider type and the plans your patients carry. We will map the state enrollment and every managed care plan you actually need.
Free credentialing check Talk to a credentialing specialist