Medicaid provider enrollment is run entirely by state agencies, not by a single federal system. Each state has its own online portal, its own application, and its own processing timeline; a figure quoted for one state's Medicaid program does not apply to any other state. What CMS does set federally is risk-based screening under 42 CFR 455 Subpart E (every applicant is screened at a limited, moderate or high risk level depending on provider type, with the review and background checks scaled to match) and a 5-year revalidation floor under 42 CFR 455.414, which every state must meet or beat. Some states revalidate more often for specific provider types: Louisiana requires DMEPOS suppliers to revalidate every 3 years, and Puerto Rico revalidates every 3 years across the board.
Before applying to any state Medicaid program, you need an active NPI through NPPES and, in most cases, an active state licence in the state where you will bill, since Medicaid enrollment follows licensure rather than substituting for it. Search for "[your state] Medicaid provider enrollment" to find that state's own portal; this guide covers what is common across states, not a specific state's checklist.
How long does Medicaid provider enrollment take?
There is no federal deadline for a state to decide a provider enrollment application, so the honest answer is: it depends entirely on the state. That is a real gap, not an oversight in this guide; a search of CMS's own guidance and the federal regulations turned up no national processing-time standard for provider enrollment decisions.
The 45-and-90-day deadlines sometimes quoted for Medicaid are a different thing entirely: 42 CFR 435.911 sets those limits for beneficiary eligibility determinations, meaning how fast a state must decide whether a patient qualifies for Medicaid, not how fast it must credential a provider. Do not confuse the two when budgeting your timeline. Some states do publish their own provider-enrollment windows: Missouri's own administrative rule gives its Medicaid agency 90 days to decide, extendable to 120 days with written notice. That is one state's rule, not a national one; check your own state Medicaid agency's published standard before planning around any figure you read elsewhere.
What does the federal government actually require every state to do?
Two things apply nationally regardless of which state you enroll in: risk-based screening on the way in, and revalidation on a recurring cycle after that. Everything else, including the application itself, is state-specific.
| Federal requirement | What it means | Source |
|---|---|---|
| Risk-based screening | Every provider type is assigned a limited, moderate or high risk level; the state's screening (license verification, database checks, site visits, fingerprint-based background checks for high-risk categories) scales to match | 42 CFR 455 Subpart E |
| Revalidation | Every enrolled provider's information must be rechecked at least once every 5 years; a state may require it more often for specific provider types | 42 CFR 455.414 |
| NPI | An active National Provider Identifier is required before most state Medicaid applications will even be accepted | NPPES |
How often do I need to revalidate my Medicaid enrollment?
At least every 5 years, under the federal floor at 42 CFR 455.414, though several states require specific provider types to revalidate sooner. Louisiana requires DMEPOS suppliers to revalidate every 3 years rather than 5, and Puerto Rico's Medicaid program applies a 3-year cycle across all provider types. Missing a revalidation deadline typically leads to deactivation, which creates a gap in your ability to bill until you re-enroll, not merely a late fee.
A revalidation notice goes to the address and contact details on file with your state Medicaid agency, the same failure point that causes missed recredentialing with commercial payers. Keep that contact information current at all times, not only when you expect a notice.
What causes a Medicaid enrollment application to stall?
Most often, a mismatch between the state licence you hold and the state you are enrolling in, or a missing NPI, rather than anything about your actual qualifications. Medicaid enrollment in a given state requires an active licence in that same state; a compact privilege or an out-of-state licence does not substitute for it.
The broader set of administrative causes, most of which apply to Medicaid as much as to commercial payers, is covered in why credentialing applications stall.
How is Medicaid different from Medicare enrollment?
Medicare enrollment runs through one federal system, PECOS, with a published CMS contractor timeliness standard; Medicaid enrollment runs through 51 separate state systems with no equivalent federal standard. A clinician billing both programs needs two separate enrollments, on two different timelines, even in the same state.
The federal Medicare process, including its 95-percent-within-15-days target for complete online applications, is covered in how to enroll in Medicare through PECOS.
What to do first. Confirm your state licence is active in the exact state where you will bill Medicaid, get an active NPI through NPPES if you do not already have one, then search for your own state's Medicaid provider enrollment portal. A specialist who already knows a given state's portal and document list can save real time here; see how to evaluate a licensing specialist.
Check licensure first
Medicaid enrollment follows state licensure, not the other way around. An out-of-state or compact-based privilege does not substitute for the home-state licence most Medicaid programs require.
Get your NPI before you apply
Most state portals will not accept an application without an active NPI already on file with NPPES.
Calendar your revalidation now
Five years is the federal floor, not a fixed number; some states and provider types face a 3-year cycle. Find your own state's schedule rather than assuming five.
Need this handled rather than researched?
Telesure matches clinicians with licensing and credentialing specialists so you can compare scope, timeline and price before committing to anyone.
Get matched with a specialistNot ready to create an account?
Juney Ham is the founder and CEO of Telesure, the marketplace that matches clinicians with independent licensing and credentialing specialists. Previously co-founder of Upside and CMO at Hired. Every regulatory figure on this page is taken from the issuing state board, compact commission or CMS and was verified on 10 October 2026. Fees and compact status change; confirm with the relevant board before relying on them.
← All guides