Medicaid enrollment is not one process run fifty times. Each state agency writes its own application, collects its own fee, and decides whether a practice enrolls as a group, a practitioner enrolls individually, or both have to happen before a claim pays. A federal floor in 42 CFR Part 455 keeps the risk categories and the five-year revalidation minimum the same everywhere. Almost nothing above that floor is uniform.
What this covers
- Every state screens on the same three risk levels, limited, moderate and high, and revalidates each provider at least every five years under 42 CFR 455.450 and 455.414.
- The application is a state system. Texas uses PEMS, Illinois uses IMPACT, New York uses the Provider Services Portal, and none of them is the Medicare CMS-855.
- Group and individual enrollment diverge most. Texas enrolls individuals, performing providers and groups as separate categories under different NPIs and tax numbers.
- The CY 2026 federal application fee is $750, and it falls on institutional providers. Most physician and nurse practitioner enrollments are exempt.
- An April 2026 CMS directive pushed every state to revalidate its whole provider file over 24 months, so a five-year cycle is running faster than the calendar suggests.
The federal rules tell a state what has to happen. They rarely tell it how or when, and that gap is where a multi-state timeline breaks.The screening standard is constant. The process around it is not.
A practice that already holds a Texas Medicaid number cannot carry it into another state. Enrollment is held per state, per legal entity, and often per service location. What follows separates what federal law fixes from what each state decides, then walks through where documentation demands diverge most.
The federal floor every state builds on
42 CFR Part 455, Subpart E sets the screening and enrollment standards every state Medicaid agency has to meet. A state must screen every enrolled provider, must enroll the physicians and professionals who order or refer, and may lean on screening already done by Medicare or another state’s Medicaid program under 455.410(c). Four standards carry across all fifty programs.
- Risk categories are the same three, limited, moderate and high, and the highest applicable level governs under 455.450.
- Limited risk means license verification and federal database checks. Moderate adds a site visit. High adds a criminal background check and fingerprints.
- Every enrolled provider revalidates at least every five years, regardless of provider type, under 455.414.
- Fingerprints, when required, are due within 30 days of the request, and a provider who does not submit them can be denied or terminated under 455.434.
Under 455.452 a state may add screening beyond the federal minimum, and under 455.450(e) it must raise a provider to high risk after a payment suspension, an existing Medicaid overpayment, or an Office of Inspector General exclusion within the past ten years. The federal rule is a floor, and states use the room above it.
The application is a state system, not a CMS-855
Medicare enrollment runs through the CMS-855 forms and PECOS. Medicaid has no equivalent national form. Each state builds its own application and portal, and the naming alone tells you the workflow will differ.
| State | Enrollment system | What it handles |
|---|---|---|
| Texas | PEMS (TMHP) | Individual, performing provider and group applications on one NPI-based platform |
| Illinois | IMPACT | Enrollment and revalidation, with separate notices per service location |
| New York | Provider Services Portal | Enrollment, revalidation and maintenance. The legacy paper process ended in May 2026 |
| Colorado | Colorado interChange | Rolling five-year revalidation through the Provider Web Portal |
| Ohio | Provider Network Management | Revalidation paired with three-year recredentialing for certain providers |
The CMS Medicaid Provider Enrollment Compendium tells providers plainly that these programs are administered by individual states and that a provider has to enroll in each state where it wants to serve residents. There is no shortcut and no reciprocity. A number issued in one state carries no weight in the next, and the requirements shift again by provider type, which makes a specialty-specific checklist more useful than a general one.
An application built for Medicare will not satisfy a state Medicaid agency. The information overlaps, and the form, the signature, the attachments and the submission channel do not.
Who enrolls: individual, group, or both
The sharpest divergence is who the state enrolls. Some states register a group and its practitioners in one file. Others require the practitioner to hold an individual enrollment first, then a separate group enrollment for the billing entity, and treat a practitioner who bills under a group’s tax number as a third category entirely.
Texas writes all three into its provider manual. PEMS bases each application on the provider’s NPI, and a provider enrolls as either an individual or an organization.
- Individual. The practitioner enrolls under their own name and Social Security or tax number. Certain types must enroll this way, including dietitians, licensed vocational nurses and respiratory care practitioners.
- Performing provider. A licensed practitioner enrolls under the group’s federal tax number, and payment goes to the group. Texas encourages these to start from a group initiated request.
- Group. The legal entity enrolls under its own name and tax number, and the enrollment rests on the entity’s licensure and certification.
Texas adds a condition that catches groups from other states. Each provider in the group has to hold a valid Medicare number unless that performing provider has an exception, and the group application must list the current Medicare numbers for the group and for every provider. A group that has never enrolled in Medicare can still be admitted, and it must enroll in Medicare within 90 days. The state details read well against our Texas medical billing notes.
A physician who only orders or refers for Medicaid patients still has to enroll as a participating provider in most states, a requirement that flows from 455.410(b) and shows up in state manuals. That enrollment is lighter than a billing enrollment, and it is not optional.
The fee you pay, and the fee you do not
The application fee is federal, not state, but the states collect it. The CY 2026 fee is $750, up from $730 in 2025, published in the Federal Register at 90 FR 55738 after a 2.7 percent CPI-U adjustment. It applies to institutional providers that initially enroll, revalidate or add a new practice location, for applications submitted between January 1 and December 31, 2026.
Most practices that read this will not pay it, and the exemptions are worth knowing before someone mails a check.
- An individual physician or non-physician practitioner is exempt. A nurse practitioner enrolling under an individual application pays nothing.
- A provider already enrolled in Medicare, or in another state’s Medicaid or CHIP program, that paid the fee for the same period is exempt with proof of payment.
- The fee falls on institutional providers: facilities, agencies and similar organizations designated by the state plan.
- The fee attaches to each triggering event, so a revalidation, a re-enrollment or a new practice location can bring a fresh $750.
Collection is where the states separate again. Mississippi directs providers to make the check payable to the Mississippi Division of Medicaid, annotate the application tracking number, and mail it to a Gainwell Technologies post office box. North Carolina ties the fee to specific events: initial enrollment, re-enrollment, adding a new owner or a new site location, and re-verification. Payment instructions are state specific, and they are part of the application, not an afterthought.
Revalidation cycles and the 2026 revalidation push
Five years is the federal floor, and states are free to move faster. New York publishes risk-tiered cycles: three years for high-risk providers, four for moderate and five for limited. Ohio pairs a five-year revalidation with a three-year recredentialing date for independently licensed practitioners and certain organizations, so those providers are reviewed more often than the federal minimum requires.
The bigger change landed in April 2026, when CMS directed every state to revalidate its entire enrolled provider file within 24 months. New York tells providers the process runs through June 2028. Texas says it submitted its strategy on June 5, 2026 and will notify affected providers. A practice treating its five-year date as a fixed anchor should check the state’s current schedule instead.
Illinois disenrolls a provider that misses its cycle, and the break in enrollment affects payment. Texas disenrolls the provider from every state program, including Medicaid managed care, and denies claims until a re-enrollment is approved. Colorado denies claims from providers who have not revalidated by their due date.
The mechanics differ as much as the dates. Texas opens a revalidation application 180 days before the due date and allows a 45-day grace period after it. Ohio mails a notice at 120 days and reminds at 90, 60 and 30, then gives the provider ten days to finish once the application is started. Illinois emails notices 90 and 30 days out. Colorado warns about six months ahead and revalidates each location separately, because locations approved at different times fall due at different times.
Where documentation demands diverge most
Underneath the shared screening categories, states ask for different proof, and the differences show up in the same few places.
| Requirement | How it varies | Where it bites |
|---|---|---|
| Practitioner license | State board verification, plus Medicare participation for some provider types | Out-of-state practitioners often document enrollment in their home state’s Medicaid, as Pennsylvania requires |
| Ownership and background checks | Anyone with 5 percent or more ownership, on high-risk provider types | Pennsylvania requires an FBI check and a state police record check, and fingerprints those owners |
| Practice locations | Some states require a unique NPI per location | Colorado makes organization providers hold a unique NPI for each service location and type under HB 18-1282 |
| Electronic submission | Paper is being withdrawn state by state | New York ended its legacy paper process in May 2026, and Texas accepts revalidation only through PEMS |
The Medicare prerequisite is the one that rearranges a launch calendar. Texas requires some provider types to be Medicare enrolled before Medicaid, and a group has to show Medicare numbers for itself and each provider. A practice building a Texas enrollment around practitioners who are not in Medicare has to solve that first, because a group enrollment will not close without it.
How to plan a multi-state enrollment
The work is not harder than single-state enrollment once the differences are written down. It is harder when they are not. Credentialing and Medicaid enrollment share the same underlying file, so the matrix below can live alongside it.
For each state, record the portal, the application type, the fee and who pays it, the revalidation cycle, and the notification channel.
Read the provider manual for its enrollment categories before anyone signs a form. A performing-provider category changes who holds the number and who gets paid.
Where a state requires Medicare enrollment as a prerequisite, the Medicaid clock waits on the Medicare clock. Sequence Medicare first.
One practice can hold several dates in one state. Track each location and entity, not only the practice name.
Confirm the current fee, the payment form and the signer before submission. An application returned for payment never entered the review queue.
A single national timeline does not exist, and a practice planning fifty enrollments from one spreadsheet will misjudge every state that runs its own clock.
State Medicaid enrollment questions
No. Medicare and state Medicaid are separate enrollments, and a Medicare number does not transfer. Some states require Medicare enrollment as a prerequisite for certain provider types, which makes Medicare a step inside their process rather than a replacement for the state application. The practice still files with the state agency and signs its provider agreement.
No. Each state agency administers its own program, and CMS tells providers directly that they must enroll in every state where they will serve residents. Screening can sometimes be shared between states under 42 CFR 455.410(c), but the enrollment, the provider agreement and the number belong to the state that issued them.
There is no national figure. Texas says the process typically takes up to 60 days after all information is received, before plan contracting begins. Several states publish no estimate at all. Add time for a site visit if the provider type screens at moderate or high risk, and add time for a group and each service location.
Institutional providers pay $750 for initial enrollment, revalidation or a new practice location. Individual physicians and non-physician practitioners are exempt. A provider already enrolled in Medicare, or in another state’s Medicaid or CHIP program, that paid the fee for the same period is exempt with proof of payment.
At least every five years under 42 CFR 455.414, and states can require it more often. New York revalidates high-risk providers every three years, moderate every four and limited every five. Ohio pairs revalidation with a three-year recredentialing cycle for independently licensed practitioners and certain organizations.
The enrollment terminates and the state stops paying. Texas disenrolls the provider from every state health care program, including Medicaid managed care, and denies claims until a re-enrollment is approved. Colorado denies claims from providers who have not revalidated by their due date.
The bottom line
Medicaid enrollment rewards the practice that reads each state’s rules instead of assuming one. The federal floor is real, and the risk categories, the fee and the five-year minimum are consistent across programs. Everything a practice actually has to do, the portal, the application category, the documentation and the revalidation calendar, is set state by state, and that is the work a multi-state enrollment plan has to hold.
Running enrollments in more than one state?
The MedFactor credentialing team builds the state-by-state enrollment matrix, sequences the Medicare dependencies, and tracks every revalidation date per entity and location. Send one state’s application and the schedule behind it, and we will show you where a multi-state file is exposed before the first form goes in.
Request a free multi-state enrollment reviewThis article describes the federal provider screening rules in 42 CFR Part 455 and the enrollment and revalidation policies published by the states named. Requirements, fees and timelines change, so confirm the current rules with the specific state Medicaid agency before filing.
