What Is Provider Credentialing? The Complete 2026 Guide

What Is Provider Credentialing in Healthcare?

Provider credentialing is the process of verifying a healthcare professional’s qualifications, including their education, training, licenses, board certifications, malpractice history, and work history, before they are approved to participate in a payer network or practice within a healthcare facility. Credentialing ensures that every provider delivering patient care meets the standards required by insurers, hospitals, and regulatory bodies. Without completed credentialing, a provider cannot bill insurance, receive reimbursement, or be listed as in-network.

• How long it takes: The credentialing process typically takes 90 to 120 days from application submission to approval, though delays from incomplete documentation or payer backlogs can push timelines to 150 days or longer.
• Where CAQH fits in: Most commercial payers require providers to maintain a verified profile in CAQH ProView, which serves as a centralized repository for credentialing data. Keeping your CAQH profile current and attested is a prerequisite for most payer enrollment applications.
• Why it matters financially: Every day a provider operates without completed credentialing is a day they cannot bill insurance for the patients they see. For a new practice, a 30-day delay in credentialing can cost tens of thousands of dollars in lost reimbursement.

What Provider Credentialing Actually Involves

Provider credentialing is the verification step that confirms a healthcare professional is who they claim to be and holds the qualifications they report. The process goes beyond checking a license number. It includes primary source verification of medical school graduation, residency completion, board certification status, DEA registration, malpractice claims history, sanctions, and exclusions from federal healthcare programs. Each of these checks is verified through the original issuing body, not through the provider’s own documentation. For a detailed look at the CAQH profile that most payers require as the starting point, see our CAQH ProView guide.

Credentialing is required at multiple levels. Payers require it before a provider can join their network and bill for services. Hospitals require it before granting clinical privileges. Medicare and Medicaid require their own enrollment processes, which overlap with but are distinct from commercial payer credentialing. A provider opening a new practice or joining a new group may need to complete credentialing with 10 to 20 entities simultaneously, each with its own application, timeline, and documentation requirements.

The most common misconception we encounter when working with new practices is the assumption that credentialing happens automatically once a provider has a state license. It does not. Licensing and credentialing are separate processes. A license permits a provider to practice medicine in a state. Credentialing permits a provider to bill a specific payer for the services they render. Without both, the provider can see patients but cannot get paid by insurance.

What Is Provider Enrollment and Credentialing?

Provider enrollment and credentialing are two related but distinct steps in the process of getting a healthcare provider authorized to bill insurance. Credentialing verifies the provider’s qualifications through primary source verification. Enrollment registers the provider in a payer’s or government program’s system so claims can be submitted and processed. In practice, most payers bundle both steps into a single application workflow, but they are technically separate, and problems in either step can delay the other.

Credentialing answers the question: is this provider qualified? Enrollment answers the question: is this provider registered in our system to receive payment? A provider can pass credentialing but still not be enrolled if the contracting step is incomplete or the effective date has not been assigned. Until all three steps, credentialing, contracting, and enrollment, are complete, the provider cannot bill that payer as in-network. For a deeper look at how contracting works once credentialing is approved, see our provider contracting guide.

The distinction matters most for Medicare and Medicaid. Medicare enrollment happens through PECOS and follows CMS-specific rules that differ from commercial payer credentialing. Medicaid enrollment is state-specific, with each state operating its own portal and requirements. A provider expanding into a new state needs to complete Medicaid enrollment in that state separately, even if they are already credentialed with the same commercial payers nationally.

Credentialing vs. Contracting vs. Enrollment

These three terms are used interchangeably in conversation, but they mean different things in practice.

Term	What It Does	Who Requires It
Credentialing	Verifies the provider’s education, licenses, certifications, malpractice history, and sanctions through primary sources	Payers, hospitals, health systems, CMS
Contracting	Establishes the business terms: reimbursement rates, fee schedule, billing rules, and network participation agreement	Commercial payers, managed care organizations
Enrollment	Registers the provider in a payer’s or government program’s system so claims can be submitted and processed	Medicare (via PECOS), Medicaid (state-specific), commercial payers

For Medicare-specific enrollment, see our Medicare provider enrollment guide. For Medicaid, see our state-by-state Medicaid enrollment assistance guides.

What Are the Requirements for Provider Credentialing?

Provider credentialing requirements are set by each payer individually, but they follow a common framework based on NCQA (National Committee for Quality Assurance) standards. As of 2026, NCQA requires primary source verification to be completed within 120 days for accredited organizations and 90 days for certified organizations, with monthly monitoring of sanctions and license status.

The core requirements that apply across virtually all payers include an active, unrestricted state medical license in the state where the provider will practice, a current DEA registration (if the provider prescribes controlled substances), board certification or board eligibility in the provider’s specialty, an active NPI (National Provider Identifier), current professional liability (malpractice) insurance meeting minimum coverage thresholds, no unresolved sanctions, exclusions, or disciplinary actions from federal or state programs, and a completed, attested CAQH ProView profile.

Individual payers may add requirements on top of this baseline. Some require a minimum number of years in practice. Others require hospital privilege letters, specific continuing education documentation, or proof of participation in quality improvement programs. The safest approach is to confirm each payer’s specific requirements before submitting an application. For a closer look at the CAQH number that every provider needs, see our CAQH number guide.

What Documents Are Needed for Provider Credentialing?

The documentation required for provider credentialing is extensive, and missing a single item is the most common cause of application delays. Here is the complete checklist, in the order most credentialing teams organize it.

1. Current state medical license (or applicable professional license for non-physician providers).
2. DEA certificate, current and matching the practice address on the application.
3. Board certification or board eligibility letter from the relevant specialty board.
4. NPI confirmation (individual NPI for the provider, plus organizational NPI if billing through a group).
5. Professional liability (malpractice) insurance face sheet showing current coverage dates and minimum limits.
6. Curriculum vitae or work history covering at least the past five years with no unexplained gaps.
7. Completed and attested CAQH ProView profile (attested within the last 120 days). See our guide on CAQH attestation for the exact requirements.
8. CAQH state authorization form (the state release form that authorizes payers to access the provider’s CAQH data).
9. Hospital privilege letters (if applicable and required by the payer).
10. Government-issued photo identification.

In our experience, the documents most often missing or expired at the time of submission are the malpractice insurance face sheet (which expires annually), the CAQH attestation (which expires every 120 days), and the state authorization form (which many providers do not realize is a separate document from the CAQH profile itself).

What Are the Common Reasons for Provider Credentialing Denials?

Credentialing denials fall into two categories: qualification-based denials, where the provider does not meet the payer’s standards, and administrative denials, where the application itself is incomplete or incorrect. Administrative denials are far more common and are almost always preventable.

Unattested or incomplete CAQH profile. If the provider’s CAQH ProView profile has not been attested within the last 120 days, most payers will not process the application at all. This is the single most preventable denial in credentialing.

Missing or expired documents. A malpractice insurance certificate, state license, or DEA registration that expires between submission and review triggers a hold or outright denial. Check expiration dates on every document before submitting.

Malpractice history or open claims. Unresolved malpractice claims, multiple settled claims within a short period, or claims above a threshold amount can trigger a credentialing committee review and potential denial. The provider typically has the right to appeal and provide context.

OIG exclusion or state sanctions. Providers listed on the OIG exclusion list or with active state disciplinary actions will be denied by every payer. These must be resolved before an application can succeed.

Network saturation. Some payers close their networks in specific geographic areas or specialties when they determine they have enough contracted providers. A denial for network saturation is not a reflection of the provider’s qualifications but of the payer’s current network strategy. This type of denial is harder to appeal.

Data mismatches. If the provider’s name, NPI, tax ID, or practice address on the credentialing application does not match what is on file with CAQH, NPPES, or the state licensing board, the primary source verification will fail. Across the thousands of applications we have managed, data mismatches are the most common cause of delayed approvals because they look like a qualification problem when they are actually a data entry problem.

How Long Does Provider Credentialing Take?

The standard credentialing timeline is 90 to 120 days from application submission to network activation. That range assumes the application is complete, the CAQH profile is attested, and no follow-up documentation is required. In practice, many providers experience timelines of 120 to 150 days because of incomplete applications, payer processing backlogs, or missing primary source verification responses.

Medicare enrollment through PECOS typically takes 60 to 90 days. Medicaid enrollment timelines vary significantly by state, ranging from 30 days in states with streamlined portals to 120 days or longer in states with manual review processes. Our state Medicaid enrollment guides break down the timeline and requirements for each state.

One question we hear constantly from practice managers is whether there is any way to speed up the process. The honest answer is that the payer controls the timeline once the application is submitted. What you can control is the quality of the submission. A clean, complete application with a fully attested CAQH profile and all supporting documents moves through the queue without stops. An application missing one document goes to the back of the line every time it gets flagged.

The Role of CAQH in Provider Credentialing

CAQH ProView is the centralized credentialing database used by more than 1.4 million healthcare providers and accessed by more than 1,000 health plans, hospitals, and other organizations. For most commercial payers, a completed and attested CAQH profile is a prerequisite for credentialing. For a complete walkthrough, see our guide to CAQH in healthcare.

The attestation cycle is the part that catches providers off guard. CAQH requires providers to review and re-attest their profile every 120 days. If a provider misses the attestation window, their profile goes inactive, and any payer that tries to pull it during a credentialing or re-credentialing cycle will see an incomplete record. In our experience, missed attestation deadlines are responsible for more involuntary network terminations than any other single cause.

In-House Credentialing vs. Outsourcing

In-house credentialing makes sense for large health systems with dedicated medical staff offices and full-time credentialing coordinators. It can also work for solo practitioners who only need to credential with a handful of payers. The risk is that credentialing is detail-intensive and deadline-driven. A missed attestation, an expired document, or a mismatched NPI can delay the entire process by weeks, and the practice absorbs the lost revenue. For practices that want to understand how insurance paneling and credentialing interact, our dedicated guide covers the full workflow.

Outsourcing makes sense for practices that are adding providers regularly, opening new locations, expanding into new states, or simply do not have staff with credentialing experience. A credentialing partner like Contracting Providers manages the entire lifecycle from CAQH setup through payer approval, tracks every deadline, and resolves issues before they become delays.

Providers often come to us after a failed attempt to handle credentialing in-house. The most common pattern is a new practice that assumed the office manager could handle payer enrollment alongside other duties, only to discover that credentialing requires a specific knowledge base, constant follow-up with payers, and rigid attention to deadlines that most general administrative staff are not trained to manage.

Frequently Asked Questions

Next Steps

Need to set up or update your CAQH profile? Start with our CAQH ProView guide.

Starting Medicaid enrollment? See our state-by-state Medicaid credentialing guides.

Wondering what a CAQH number is? Read what is a CAQH number and why every provider needs one.

Looking at insurance paneling? See insurance credentialing and paneling explained.

Ready to hand credentialing off to a specialist? Book a free consultation with Contracting Providers and get your timeline started.