Provider credentialing ensures that a healthcare provider is qualified to deliver patient care, while payer enrollment connects the provider to an insurer so claims can be processed and payments received. Understanding provider credentialing vs payer enrollment is essential because credentialing verifies a provider’s qualifications, whereas enrollment links the provider to the payer’s billing system. Both processes are necessary for successful in-network claims.
These processes are often confused because many commercial payers use a single application for credentialing and enrollment. Practices that need help managing both can use credentialing and enrollment services to keep payer applications, provider information, and effective dates aligned. Even if a provider passes credentialing with all commercial payers, mismatched enrollment details can still lead to claim denials and revenue loss.
This guide explains the differences between provider credentialing and payer enrollment, where the processes overlap, how they work with Medicare, Medicaid, and commercial payers, and what practices should consider before treating an insured patient.
What Is Provider Credentialing?
Provider credentialing involves the process by which an entity like a health care plan, hospital or credentials verification organization verifies a healthcare provider in order to determine if the individual qualifies on the basis of the qualifications and criteria that the organization expects. The response will therefore be yes or no; it will not necessarily generate a billing number.
The credentialing process for most health care plans is based on the NCQA standards. Using the NCQA standards, nothing is taken at the word of a healthcare provider. Instead, everything is verified at the source – state licensing board for the license, DEA for the controlled substance registration, board of certification in regard to specialty certification and National Practitioner Data Bank for malpractice issues and disciplinary actions.
The requirements were amended by NCQA in July 2025. According to the new NCQA credentialing requirements for 2025, verifications within the file cannot be older than 120 days at the time of decision from 180 days, while the sanction monitoring of the enrolled providers is required monthly. The credentialing cycle is still three years in duration. Indeed, if the file sits in the committee queue for a very long period of time, it gets outdated and new verifications are needed.
The hospital conducts its own parallel procedure, known as privileging, which determines what a credentialed physician is able to do within the facility. The procedure concerns surgeons and hospitalists, yet it is the facility’s decision, and has nothing to do with the insurance claim payment. Practices working with a medical billing company can also coordinate credentialing information with their billing and revenue-cycle workflows, helping reduce downstream claim and enrollment issues.
What Is Payer Enrollment?
Payer Enrollment is yet another name of Provider Enrollment. It is a procedure by which a provider becomes enrolled in the database of the specific payer so that he can receive payment of claims from the specific payer based on his own identification numbers. Where Credentialing tries to find out whether a provider is eligible or not, enrollment tries to find out whether the payer recognizes him or not.
Enrollment data connects the dots that are never touched by Credentialing. The individual NPI is connected to the group NPI and Tax Identification Number as Type 2; locations of all services are included in the enrollment data; reassignment of the benefits to the group is done and the date of billing is specified. The result is a provider ID number or a status of participation and the effective date, the latter of which determines the dates of service covered by that payer.
In the case of Medicare Original, enrollment is all that is needed. Physicians do not require credentialing from the credentialing committee for Medicare. MAC will conduct the screening of the application, review the licensure of the provider, and find his name in the exclusion lists.
Provider Credentialing vs Payer Enrollment: Side-by-Side Comparison
The table below lines up the two processes on the attributes a practice manager deals with every week.
| Attribute | Provider Credentialing | Payer Enrollment |
|---|---|---|
| Question it answers | Is this provider qualified? | Can this payer pay this provider? |
| Who runs it | Health plans, hospitals and CVOs | Medicare MACs, state Medicaid agencies and each payer’s enrollment unit |
| What gets checked | License, DEA, board certification, education, work history, malpractice and sanctions | NPI, TIN, service locations, group affiliation, reassignment and payment details |
| Main systems | CAQH ProView, state licensing boards and the NPDB | PECOS, state Medicaid portals and payer provider portals |
| Result | Approval by a credentialing committee | Provider ID, participation status and an effective date |
| Renewal cycle | Recredentialing every 36 months under NCQA; CAQH re-attestation every 120 days | Medicare revalidation every five years; Medicaid revalidation at least every five years |
| What a lapse looks like | Termination from the payer’s network | Claims deny or stop paying under that identifier |
Because credentialing and enrollment deadlines recur on different schedules, practices should maintain a recredentialing checklist that tracks CAQH attestations, payer recredentialing dates, Medicare revalidation, Medicaid revalidation, and required document updates.
A simple way to hold the difference in your head: credentialing is about the person and enrollment is about the payment relationship. Change a provider’s license and you have a credentialing issue. Change the address where they see patients and you have an enrollment issue, even though nothing about their qualifications moved.
Where Do Credentialing and Enrollment Overlap?
The intersection lies primarily within CAQH ProView, which is used by commercial payers for collecting the credentials. A provider creates a single profile, grants access rights and confirms the accuracy of the information in the regular cycle. Payers use this information for verifying the qualifications, and many payers use this very profile for creating the enrollment record.
Given the common source of the information, many commercial payers perform these two steps together in one unified application. A provider submits only once and a payer performs the verification of the provider’s credentials, imports the provider into the claims system and sends the approval letter with the effective date. It looks like a single process from the perspective of the medical practice, but actually it consists of two processes performed by different departments of the payer, and any issue in either step will stop the claim process.
The CAQH attestation process is a perfect illustration of how these two processes are interconnected. Every 120 days, the provider needs to re-attest; moreover, Blue Cross Blue Shield of Michigan notifies the provider that the absence of re-attestation will result in being deleted from the online directory and losing the credentialing status. It means that the enrollment process does not stop after the initial credentialed process; the provider still needs to continue the process of re-attestation.
Credentialing vs Contracting: The Step Between Approval and Payment
Credentialing approval and a signed contract are not the same thing. Credentialing tells a payer that a provider meets its standards. Contracting is the business agreement that sets the fee schedule, the claim filing rules and the terms of network participation. A provider can be approved by a payer’s credentialing committee and still have no contract, which leaves that provider out of network.
The contract comes first for a new practice, and each new provider gets credentialed and added to it. With a well-established practice, credentialing but no contract change is usually all that adding a new provider involves, though always with enrollment for the practice’s TIN. And the contract also determines the fee schedule and the contractual adjustments that appear on remittance advice, so it should be reviewed carefully before signing.
Taken together, the typical sequence for a commercial plan is NPI and license first, CAQH second, then credentialing, followed by either contracting or roster change and finally enrollment with an effective date. There is some flexibility in the order. Some payers credential and contract in parallel fashion, while Original Medicare skips credentialing through committee altogether.
How Does Medicare Provider Enrollment Work?
Medicare provider enrollment runs through PECOS, the Provider Enrollment, Chain and Ownership System, or through paper CMS-855 applications sent to the MAC for the provider’s region. The application depends on who is enrolling.
| Form | Who Uses It |
|---|---|
| CMS-855I | Individual physicians and non-physician practitioners, including reassignment of benefits to a group |
| CMS-855B | Clinics, group practices and certain other suppliers |
| CMS-855A | Institutional providers such as hospitals and home health agencies |
| CMS-855O | Practitioners who only order, refer or certify and do not bill Medicare |
| CMS-855S | Durable medical equipment, prosthetics, orthotics and supplies (DMEPOS) suppliers |
Older enrollment guidance materials still indicate that practices must use a reassignment form. There is no longer a reassignment form. CMS has folded the CMS-855R into the CMS-855I, and MACs have ceased to accept the old CMS-855R as of October 31, 2023. Reassignments are now indicated in Section 4F of the CMS-855I, or in the reassignment topic of PECOS.
The effective date requirement that costs practices the most
Medicare’s rules on effective date and retrospective billing mean that a physician’s or non-physician practitioner’s effective date is either the date that the MAC receives the application which is subsequently approved or the first day that the provider sees Medicare patients at the new location. Medicare then permits retrospective billing 30 days before the effective date, or 90 days when there has been a presidentially declared disaster delaying initial enrollment.
How this plays out is as follows. A physician begins seeing Medicare patients on March 1st, but the CMS-855I is submitted on May 1st. The effective date will be May 1st, and the retrospective billing will go back to April 1st. All visits during the month of March are therefore unbillable. The solution is not faster processing, but timely filing.
Response time is important too. In case MAC requests information and the applicant fails to provide it within 30 days, the application will be declined, which means that a new application has to be filed along with a new date. Approved providers have to revalidate their Medicare registration every five years and notify changes of practice site within 30 days.
How Is Medicaid Enrollment Different?
Medicaid enrollment happens individually for each state and through the Medicaid Agency in each individual state, which operates on federal minimum standards. According to Section 42 CFR 455.410, all physicians or individuals who order or refer a service for an individual covered under Medicaid must be enrolled in Medicaid as a participating provider, whether they bill Medicaid or not. Even if a lab, imaging facility, or home health agency renders the service perfectly, their billing could be rejected due to the ordering physician’s failure to enroll.
States must also revalidate every enrolled provider at least every five years, and some states set a shorter cycle. Medicaid managed care plans add one more layer, since many credential providers on their own even after the state has enrolled them. A provider can be active in fee-for-service Medicaid and still be out of network with the managed care plan that actually covers the patient.
Provider Credentialing Checklist: Which Documents Feed Which Step?
Most of the delays occur due to lack of one missing document only; having knowledge about the use of each document will make the process smooth. This list contains credentialing requirements and additional documents required for enrollment.
| Document | Credentialing | Enrollment | Why It Matters |
| Individual NPI (Type 1) | Yes | Yes | Identifies the provider on every application and claim |
| Group NPI (Type 2) and TIN | No | Yes | Tells the payer which entity receives payment |
| State professional license | Yes | Yes | Verified at the source and must be active in the state of practice |
| DEA and state controlled substance registration | Yes | No | Required for prescribers in each state where they prescribe |
| Board certification | Yes | No | Verified with the certifying board when the provider claims specialty status |
| Education and training records | Yes | No | Medical school, residency and fellowship verified for new providers |
| Work history with gaps explained | Yes | No | Payers commonly ask for five years, and unexplained gaps hold up review |
| Malpractice certificate and claims history | Yes | No | Checked against the carrier and the NPDB |
| Attested CAQH ProView profile | Yes | Yes | Feeds commercial credentialing and many enrollment setups |
| Practice locations | No | Yes | Claims from an address not on file can deny |
| W-9 and IRS letter confirming the TIN | No | Yes | Legal name and TIN must match IRS records exactly |
| EFT authorization (CMS-588 for Medicare) | No | Yes | Sets up electronic payment |
| Hospital privileges or admitting arrangement | Yes | No | Many plans ask for it from specialists who admit patients |
Name consistency deserves its own check. If the legal name on the license, the NPPES record, CAQH and the IRS letter does not match character for character, applications stall for reasons that are hard to spot on a quick review.
CTA :
How Long Does Each Process Take?
There is no single number, because each step runs on someone else’s clock. Credentialing depends on how quickly primary sources respond and how often the payer’s committee meets, which are two common causes of credentialing delays. Enrollment depends on the payer’s data load and, for Medicare, on the MAC’s processing queue.
What practice controls is the start. A complete CAQH profile, matching identifiers and applications filed well before the provider’s first day remove most of the waiting that can be removed. We cover realistic ranges payer by payer in our guide on how long provider credentialing takes, along with the credentialing delays that come up most often and how to head them off.
What Happens When One Step Is Missing?
Most credentialing and enrollment problems surface in the billing system weeks after the paperwork is filed, and the denial rarely names the real cause. It is one of the main reasons clean claims still get denied. These are the gaps that show up most often.
| Gap | What the Billing Team Sees | Where It Started |
|---|---|---|
| Credentialed but not loaded under the group | Claims deny as provider not on file or process out of network | Enrollment or roster update never completed |
| Medicare enrolled but benefits not reassigned | Group claims billed under the provider’s NPI reject | Reassignment missing from the CMS-855I or PECOS |
| Services billed before the effective date | Denials for dates before coverage began | Application filed after the provider’s start date |
| New location not reported | Claims from that address deny | Enrollment record not updated |
| CAQH attestation lapsed | Recredentialing stalls and the provider drops from directories | 120 day re-attestation missed |
| Ordering provider not enrolled in Medicaid | Lab, imaging or equipment claims deny | Ordering or referring provider never enrolled |
Your denial management team can appeal some of these, but the lasting fix sits upstream in the credentialing file or the enrollment record.
Should You Outsource Credentialing or Keep It In-House?
The right answer is more about how many dates you can manage to track without dropping one. With just a few payers, and a single provider practice, you’ll be able to handle credentialing all by yourself with the help of a good schedule and constant follow-ups. If your group is hiring new providers every quarter, with 12 payers and more than a dozen states to consider, you are tracking CAQH attestations on a quarterly basis, recredentialing once in three years, Medicare and Medicaid revalidations every five years and with every move you make in between. A missed date may take your provider out of the network.
In-house teams have control and handle payer relationships themselves but you will have to employ someone whose responsibilities include following up on pending applications each week. Outsourcing will mean giving up on some of that control for the sake of a dedicated team and proper tracking that works under pressure. The pros and cons are similar to those of in-house vs outsourced medical billing, and it is quite common for medical practices to choose both at once because of the connection between enrollment and billing problems.
Getting Both Steps Right
Provider credentialing and payer enrollment are answering distinct questions, and the practice will need yes on both ends. Provider credentialing is proof that a provider meets the required qualifications, while payer enrollment ensures that a payer can identify that particular provider at a specified location, as part of a specific group, and starting on a specific date.
The two are the first activities on the revenue cycle management process, hence errors here will definitely spread far and wide. Tackling the two as a single activity will see the denial of claims some weeks later, while considering them as separate activities will see their respective renewal dates. The first claim filed by a newly enrolled provider will have a high probability of being settled.
FAQs
Is provider credentialing the same as payer enrollment?
No, since credentialing ensures that the provider credentials are verified using primary sources like the state licensing authority and the NPDB, while enrollment makes the provider part of the payer’s database having an NPI, group, and location. While some commercial payers tend to do this simultaneously on the same application, they are two different processes.
Which comes first, credentialing or enrollment?
Credentialing comes first with commercial payers, followed by signing of a contract or adding the provider to a payer’s roster and enrolling the provider using an effective date. However, sometimes these processes can happen concurrently. With the Original Medicare program, there is no committee credentialing at all, and hence the process of enrollment through PECOS or CMS-855 forms is everything.
Does Medicare require provider credentialing?
Original Medicare does not require credentialing but enrollment. The MAC will screen the application, confirm the provider’s licensure status, and check the exclusion lists prior to granting the provider billing rights. On the other hand, Medicare Advantage plan being a private plan requires provider credentialing.
Can a provider see patients before credentialing and enrollment are complete?
Yes, the provider can see patients; however, payment will be made based on the effective date established by the payer. Medicare accepts retroactive billing within 30 days of the effective date of coverage in case of special circumstances preventing timely enrollment. It’s up to the payer to establish its policies, thus the effective date in the letter of approval is what should be used.
What is the difference between credentialing and contracting?
Health plans using NCQA standards renew the credentialing process for providers every 36 months. CAQH ProView Profiles are re-attested every 120 days. Medicare revalidates the enrollment process every five years, while the state Medicaid program revalidation is done at least once every five years.
What is third-party payer credentialing?
It is credentialing with insurance companies, the third party between the patient and the provider, as opposed to hospital credentialing and privileges. It covers commercial plans, Medicare Advantage plans and Medicaid managed care plans, each of which verifies a provider before allowing network participation.
