How to Credential a Provider with Medicare and Medicaid (Step-by-Step 2026 Guide)

Prerequisites: What to Gather First

Before you open PECOS or your state Medicaid portal, collect every document you will need in one place. Missing documents mid-application is the single largest cause of credentialing delays. Here is the full list:

• Individual provider information: Legal name, all previous names, date of birth, Social Security number, home address history (5+ years), professional license number and state, license expiration date, and any disciplinary history.
• Education and training history: Medical/clinical school, graduation date, internship, residency, fellowship, and any board certifications with certificate numbers and dates.
• Work history: Complete work history with start and end dates, employer addresses, and supervisor contacts. Gaps in work history over 30 days must be explained.
• Malpractice insurance: Current policy certificate showing coverage limits, effective dates, carrier, and policy number. Most payers require $1M/$3M minimum.
• DEA registration (if applicable): Certificate showing registration number, schedules authorized, and expiration date.
• Controlled substance state license (if applicable): Separate from DEA in some states.
• Hospital admitting privileges (if applicable): Letter from the hospital credentialing office confirming active privileges.
• Practice/organization information: Legal business name, Tax ID (EIN), Type 2 NPI, practice address(es), phone, fax, payment (EFT) routing information.
• Ownership and management information: Managing employee details, any owner with 5%+ ownership, all addresses, and SSN or EIN as applicable.
• Specialty/taxonomy code for your provider type (from the NUCC Health Care Provider Taxonomy).

Step 1: NPI Enumeration (Type 1 and Type 2)

Every provider billing Medicare, Medicaid, or any payer needs a National Provider Identifier (NPI). The NPI is free, issued by CMS through NPPES, and typically takes 1-2 weeks.

• Type 1 NPI — individual provider. Every clinician needs one.
• Type 2 NPI — organization. If you are billing under a group practice, LLC, PC, or other organization, you need a Type 2 in addition to each provider's Type 1.

Apply at nppes.cms.hhs.gov. Common mistakes that delay NPI enumeration:

• Inconsistent legal name between the NPI application and other documents (medical license, SSN record)
• Wrong taxonomy code — use the NUCC code set that matches your specialty
• Mismatched Tax ID (EIN) on Type 2 applications — the IRS name must exactly match the NPPES entry
• Missing practice locations for Type 2 organizations

Step 2: CAQH ProView Setup

CAQH ProView is the centralized credentialing database used by most commercial payers. Medicare itself does not require CAQH — it uses PECOS — but you should set up CAQH at the same time as PECOS for three reasons:

1. Commercial payer credentialing almost always pulls from CAQH. If you skip it, you will redo the same data entry for every commercial payer separately.
2. Some state Medicaid programs and most Medicaid managed care organizations (MCOs) pull from CAQH.
3. Re-attesting CAQH every 120 days is required regardless — doing it from day one establishes the habit.

Register at proview.caqh.org. A payer or hospital usually invites you to CAQH by giving you a CAQH ID; you can also self-register. Complete the full application, upload every required document (license, DEA, board certification, malpractice COI, W-9), authorize release to payers, and attest. Set a reminder for 120 days out — missed re-attestation is a leading cause of stale credentialing files that block commercial payer approvals.

Step 3: Medicare Enrollment via PECOS

PECOS (Provider Enrollment, Chain, and Ownership System) is CMS's online enrollment portal at pecos.cms.hhs.gov. You can also file on paper forms (CMS-855 series), but PECOS processes faster and reduces errors.

Which CMS-855 Form Do You Need?

• CMS-855I: Individual practitioner (physicians, NPs, PAs, therapists, clinical psychologists, etc.) enrolling or reassigning benefits.
• CMS-855B: Clinics, group practices, and other suppliers enrolling an organization.
• CMS-855R: Reassignment of benefits — when an individual provider reassigns their Medicare benefits to a group practice's Type 2 NPI.
• CMS-855O: Ordering/referring only (not billing) — for providers who only order tests/refer patients but don't bill Medicare directly.
• CMS-855S: DMEPOS suppliers.

Most practice scenarios use CMS-855I + CMS-855R — the individual provider enrolls and then reassigns benefits to the group practice (which has its own CMS-855B on file).

Medicare Application Step-by-Step

1. Log into PECOS using your I&A (Identity & Access) credentials. If you don't have an I&A account, create one at nppes.cms.hhs.gov/IAWeb.
2. Select the appropriate enrollment type (CMS-855I for individual, CMS-855B for organization, etc.).
3. Complete all required sections. PECOS validates inconsistencies in real-time but won't catch everything.
4. Upload supporting documents: license, malpractice COI, DEA if applicable, and any other payer-requested items.
5. Complete the electronic signature via PECOS ESS (Electronic Signature System) or print, sign, and upload the certification statement.
6. If enrolling an organization, ensure the authorized/delegated official is properly designated.
7. Submit and record the web tracking ID. You will need this for any follow-up correspondence.

Medicare Processing Timeline

Once submitted, your application is processed by the Medicare Administrative Contractor (MAC) for your state. MACs have up to 180 days to process a complete, clean application. In practice, most clean applications finalize in 60-120 days. Expect a development request (i.e., additional info needed) on most applications — respond within 30 days or your application is closed and you must start over.

Important: Medicare effective date can be backdated up to 30 days before the date of a clean application. This means you can hold claims for services rendered in that 30-day window and bill them once approved. Services rendered before that 30-day window are not billable to Medicare.

Step 4: State Medicaid Enrollment

Medicaid is jointly funded by federal and state governments but administered by each state, which means every state has its own enrollment process, portal, forms, and timeline. There is no single national Medicaid enrollment. Typical steps:

1. Identify your state Medicaid provider enrollment portal. Most states have an online portal under their Medicaid agency's provider services division.
2. Register on the portal and complete the state-specific enrollment application.
3. Upload supporting documents: license, malpractice, DEA, CAQH ID (if the state uses CAQH), and state-specific forms (often including a Medicaid provider agreement and EFT authorization).
4. Pass any state-mandated training requirements — some states (e.g., Texas, Florida) require specific compliance training before enrollment.
5. Submit and track. Many states assign a tracking ID or provider number upon submission.

Medicaid applications frequently fail on state-specific nuances. Examples:

• California Medi-Cal requires enrollment through PAVE (Provider Application and Validation for Enrollment) and often has long processing delays.
• Texas Medicaid (TMHP) has a separate provider enrollment process and requires HHS training completion before approval.
• New York Medicaid uses eMedNY and requires Medicaid provider compliance training prior to enrollment.
• Florida Medicaid requires AHCA background checks and fingerprinting for most providers.
• Several states require the provider or practice to post a surety bond as a condition of Medicaid enrollment.

Budget 90-180 days for clean Medicaid applications in most states. California, Texas, and New York often run longer (120-240 days).

Step 5: Managed Medicaid Plans

In most states, Medicaid services are delivered through managed care organizations (MCOs) that hold state contracts — not direct fee-for-service Medicaid. Once you are enrolled with the state Medicaid agency, you must separately credential with each MCO you plan to accept. Typical MCOs by state include:

• UnitedHealthcare Community Plan
• Anthem / Wellpoint Medicaid plans
• Aetna Better Health
• Molina Healthcare
• Humana Healthy Horizons
• Centene / Ambetter / state-specific Centene brands (Superior, WellCare, Health Net)
• State-specific regional plans (e.g., Blue Cross Blue Shield Medicaid plans, regional non-profits)

Each MCO runs its own credentialing on top of state Medicaid enrollment, typically pulling from CAQH. Add 60-90 days per MCO, though much of this can run in parallel. Budget an additional 90-120 days beyond state Medicaid enrollment to be fully credentialed with the managed plans that actually determine most of your volume.

Realistic Timelines

Step	Typical Timeline	Can Run in Parallel?
NPI (Type 1 and Type 2)	1-2 weeks	Must be first
CAQH ProView setup	1-2 weeks to complete + attestation	Parallel to Medicare/Medicaid
Medicare PECOS (CMS-855I / 855B)	60-120 days	Parallel to Medicaid
State Medicaid enrollment	90-180 days (state-dependent)	Parallel to Medicare
Managed Medicaid MCO credentialing	60-90 days per MCO (often after state approval)	Most run in parallel to each other
Commercial payer credentialing	60-120 days per payer	Parallel once CAQH is complete
Total: full Medicare + state Medicaid + managed plans	4-6 months	—

Common Delays and How to Avoid Them

• Inconsistent legal names across documents. Your name on your medical license, SSN record, malpractice policy, NPI, PECOS, and CAQH must match exactly. Middle name and suffix differences cause holds. Pick one legal name representation and use it everywhere.
• Gaps in work history over 30 days. Payers require explanations for every work history gap — maternity leave, moves, gap years, etc. Prepare a clean explanation document before starting applications.
• Missing or expired documents. Malpractice certificates expire. Licenses renew. DEA certificates have expiration dates. Verify every document is current before uploading — stale documents trigger immediate development requests.
• Wrong taxonomy code. NPI, PECOS, and CAQH all use the NUCC taxonomy. Using the wrong code (e.g., general internist when you are a hospitalist) can block enrollment or trigger re-review.
• Reassignment of benefits errors. Individual providers reassigning to a group must do so cleanly on CMS-855R. A missing signature or wrong effective date stalls the reassignment.
• CAQH not attested. CAQH requires re-attestation every 120 days. Non-attested data is invisible to payers, even if it is current. Payers will either reject or hold your application until CAQH is attested.
• Failing to respond to development requests within 30 days. MACs and state Medicaid agencies close applications that go unanswered for 30 days. Closed applications must be completely re-submitted.
• Not tracking effective dates. Providers starting to bill before their effective date or without confirming final approval end up with unbillable claims. Always confirm effective date in writing before submitting claims.

Revalidation Cycles

Credentialing is not one-and-done. Every payer revalidates on a cycle, and missed revalidation means your billing privileges are deactivated — claims stop paying until you re-enroll.

• Medicare revalidation: Every 5 years for most providers, every 3 years for DMEPOS suppliers. CMS sends a notice 2-3 months before due date. Missing the deadline deactivates your PTAN.
• Medicaid revalidation: Typically 3-5 years, state-dependent. States notify in writing; some states only notify once. Calendar your state's cycle independently.
• Managed Medicaid MCO recredentialing: Typically every 3 years, sometimes every 2. Each MCO runs its own cycle.
• Commercial payer recredentialing: Typically every 3 years, pulling from CAQH. Re-attest CAQH every 120 days to keep all commercial recredentialing smooth.
• CAQH re-attestation: Every 120 days, regardless of payer cycles.

Operational recommendation: maintain a single credentialing calendar (spreadsheet or dedicated software) tracking every payer's revalidation date, every document's expiration date (license, DEA, malpractice, board certifications), and every 120-day CAQH attestation. For group practices, this is a part-time job in itself; many group practices outsource to a credentialing service.

Frequently Asked Questions

How long does it take to get credentialed with Medicare?

Medicare credentialing through PECOS typically takes 60-120 days from a clean submission. Applications with missing or inconsistent information can extend to 180+ days, and MACs have up to 180 days to process any application. The effective date can be backdated up to 30 days from the date of a clean application, so submit early and hold claims within that window for retroactive billing once approved.

How long does Medicaid credentialing take?

Medicaid credentialing varies significantly by state, typically 90-180 days. Some states — California Medi-Cal, Texas Medicaid, and New York Medicaid in particular — often run 120-240 days. Managed Medicaid plans require separate credentialing after state enrollment, adding another 60-90 days per MCO. Plan for 4-6 months from application to fully credentialed with your state Medicaid and its major managed care plans.

Do I need an NPI before credentialing with Medicare and Medicaid?

Yes. You need both a Type 1 NPI (individual provider) for every clinician and, if you bill under an organization, a Type 2 NPI (organization). NPI enumeration is free and takes 1-2 weeks through NPPES at nppes.cms.hhs.gov. Complete NPIs first, before starting any PECOS or Medicaid applications — every downstream credentialing step references your NPI.

What is CAQH ProView and do I need it for Medicare credentialing?

CAQH ProView is a centralized credentialing database used by most commercial payers. Medicare itself does not require CAQH — it uses PECOS. However, you should set up CAQH at the same time as PECOS because you will need it for commercial payer credentialing, some state Medicaid programs pull from CAQH, and most Medicaid managed care organizations use it. CAQH requires re-attestation every 120 days regardless of payer cycles.

How often do I need to revalidate with Medicare and Medicaid?

Medicare requires revalidation every 5 years for most providers and every 3 years for DMEPOS suppliers. Medicaid revalidation cycles vary by state, typically 3-5 years. Managed Medicaid plans and commercial payers typically recredential every 3 years. CAQH requires re-attestation every 120 days regardless of payer revalidation timing. Missed revalidation deadlines deactivate your billing privileges until re-enrollment is complete, which can take another 60-120 days.

Can I bill Medicare or Medicaid while credentialing is in progress?

You can see patients during credentialing, but you cannot bill Medicare or Medicaid for services until credentialing is complete. Medicare allows retroactive billing up to 30 days before the effective date on a clean application, so held claims from that 30-day window can be submitted once approval comes through. Medicaid retroactive billing rules vary by state — some allow it, others do not. Commercial payers generally do not allow retroactive billing before the effective date. For non-emergency services during credentialing, most practices either delay the visit, self-pay the patient, or bill as out-of-network if the payer allows it.

Related Resources

• Credentialing Delays: Causes and Solutions — Deep dive on why applications stall
• Credentialing a Mental Health Practice — Behavioral-health-specific credentialing nuances
• Medical Billing Services for Small Practices — How billing companies handle credentialing support
• Browse Credentialing Partners

About GetPracticeHelp

GetPracticeHelp.com is a free resource for independent healthcare practice owners. We research, compare, and connect you with vendors and tools that help your practice run better. Browse verified providers at getpracticehelp.com/providers.

Last updated: April 15, 2026 | Author: Bryan | GetPracticeHelp