A practice administrator called us in a panic last spring. Their new gastroenterologist had started six weeks earlier. The credentialing file was complete, the hospital had granted privileges, CAQH was attested, and the biggest commercial payer in the market had sent a letter saying the physician was "approved." Claims were denying anyway, with CO-B7, provider not certified or eligible for this service on this date. What had gone wrong?
Nothing had gone wrong, exactly. The payer had finished credentialing. It had not finished contracting, because the group's agreement listed providers by name in an exhibit that nobody had amended, and it had not finished enrollment, because the physician had not been loaded into the claims system under the group's tax ID. Three different departments at the payer, three different clocks, and the letter only spoke for one of them.
The question of credentialing vs contracting vs enrollment comes up in almost every onboarding we handle, usually after the fact. Physicians and even experienced office managers use the three words interchangeably, and payers do not help, because their portals and letters use different vocabulary for the same steps. This piece separates them, shows who owns each, gives the timelines we plan around, and describes the handoffs where the whole thing stalls.
Key takeaways
- Credentialing verifies the individual clinician's qualifications; contracting sets the payment terms between the payer and the practice; enrollment loads the clinician into the payer's claims system so claims pay.
- A provider can be fully credentialed and still have every claim deny because contracting or enrollment is incomplete.
- Medicare has no contracting step for standard participation, but PECOS enrollment is mandatory and the effective date rules are unforgiving.
- Commercial payers run the three steps in different departments and the "approval" letter usually means only one has finished.
- Plan 90 to 180 days from a complete application to a first paid claim, and confirm all three steps by writing before the provider sees a patient with that payer.
Credentialing: verifying the person
Credentialing is the process of confirming that a clinician is who they say they are and is qualified to practice. The payer, or a credentials verification organization (CVO) working for it, performs primary source verification: it checks the medical license with the state board, the DEA registration, board certification with the specialty board, education and training with the institutions, malpractice history through the National Practitioner Data Bank, and sanctions through the OIG exclusion list and the System for Award Management. It also reviews the application for gaps in work history, usually anything over 30 days, and asks for an explanation of each.
The application almost always starts in CAQH ProView, the shared database most commercial payers pull from. The practice completes the profile, uploads documents, and authorizes each payer to access it. The payer then verifies and takes the file to its credentialing committee, which meets on a schedule, often monthly. Committee approval is the end of credentialing. It is not the end of the process, and the letter that follows the committee meeting is the one that fooled the administrator above.
Credentialing is about the individual. It follows the clinician when they move, in the sense that a payer that credentialed a physician at a previous group has the verified file already, though most still re-run parts of it. It expires: payers re-credential every two to three years, and CAQH requires re-attestation every 120 days or the profile goes stale and payers stop pulling from it.
Contracting: setting the terms
Contracting is the agreement between the payer and the practice (the tax ID, the legal entity) that says the practice is in network and defines what it gets paid. The participation agreement covers the fee schedule or the percentage of a reference schedule, the timely filing limit, the appeal process, the recoupment lookback, termination terms, and which products the practice participates in: commercial HMO, PPO, Medicare Advantage, Medicaid managed care and exchange plans are often separate elections.
Whether a new clinician needs any contracting work depends on how the group's agreement is written. Many group agreements cover "all providers employed by or contracted with the group who are credentialed by the plan," in which case a newly credentialed physician is covered automatically. Others list participating providers in an exhibit, or require the practice to submit an add-provider request, or require a separate individual agreement for certain specialties. If nobody reads the contract, nobody knows which kind it is. We read the contract at the start of every onboarding for exactly this reason.
Contracting is where a new practice, rather than a new provider joining an existing practice, spends most of its time. Negotiating rates, getting a payer to open its network in a market it considers full, and reconciling the products the practice wants against the ones the payer offers can take longer than credentialing itself. A payer that has closed its panel to new practices in your specialty will credential the physician and then decline to contract, and the practice learns the difference between the two words the expensive way.
Enrollment: loading the provider so claims pay
Enrollment is the operational step that links the credentialed individual to the contracted entity in the payer's claims system, with an effective date. The payer creates or updates a provider record: individual NPI, group NPI, tax ID, taxonomy code, service locations, billing address, and the effective date from which claims will be accepted. When enrollment is done correctly, a claim with that rendering NPI under that billing NPI adjudicates. When it is not, the claim denies as provider not eligible even though the physician is credentialed and the contract is signed.
For Medicare, enrollment is the whole process. There is no negotiated contract for standard participation; the fee schedule is the fee schedule and the participation agreement is a form. The clinician enrolls through PECOS (the Provider Enrollment, Chain and Ownership System) with a CMS-855I application, reassigns benefits to the group with a CMS-855R (now handled within the 855I), and the group must already be enrolled with a CMS-855B. The Medicare Administrative Contractor processes it, typically in 45 to 90 days for a clean application. Medicare allows retroactive billing to the later of the filing date or 30 days before it, which is why filing the PECOS application before the start date matters so much.
Medicaid enrollment is state-specific and often a separate application from the managed care plan enrollment, meaning a physician may need both the state Medicaid ID and a separate enrollment with each Medicaid managed care organization. Commercial enrollment is usually the last step after committee approval and contract confirmation, and it is the step with the least visibility. The payer does not send a letter saying "loaded." You find out by checking the provider directory, calling provider services, or sending a test claim.
The three steps side by side
| Question | Credentialing | Contracting | Enrollment |
|---|---|---|---|
| What it answers | Is this clinician qualified? | What will the practice be paid and under what terms? | Can this clinician's claims be processed under this group? |
| Who it applies to | The individual clinician | The practice entity (tax ID) | The individual linked to the entity |
| Key systems and forms | CAQH ProView, primary source verification, credentialing committee | Participation agreement, fee schedule exhibit, product elections | PECOS and CMS-855 forms, state Medicaid portal, payer add-provider forms |
| Typical duration | 60 to 120 days commercial; not applicable to Medicare in the same form | Days if the group agreement covers new providers; months for a new entity | 45 to 90 days Medicare; 2 to 8 weeks commercial after committee |
| How you know it is done | Committee approval letter | Executed agreement or amendment listing the provider | Effective date confirmed in the payer system and a test claim pays |
| Denial when it is missing | Claims pend or deny as non-participating | Paid at out-of-network rates or denied | CO-B7, CO-16 with provider identifier remark codes |
Where the handoffs fail
Most delays we see are not in any of the three steps. They are in the gaps between them. The credentialing committee approves the file, and the approval sits in a queue for two weeks before anyone at the payer moves it to contracting. The contracting analyst notices the group agreement lists providers by name, sends an amendment, and the amendment waits for a signature at the practice for a month because nobody knew it was coming. The signed amendment arrives, and the enrollment team loads the provider with an effective date of the amendment date rather than the committee approval date, and six weeks of claims deny.
Each of those is preventable with a weekly status call or portal check per payer and a written log of who said what on what date. It is tedious work, and it is the entire job. A credentialing coordinator who only submits applications and waits is going to produce a lot of CO-B7 denials. Practices that want this handled as a managed process, with the effective dates negotiated rather than accepted, are what our credentialing and provider enrollment service exists for.
The other failure is a practice that starts the clinician seeing patients before all three steps are confirmed, on the theory that the claims can be held and released later. Sometimes that works. Often it collides with timely filing, or the payer refuses to backdate the effective date, and the practice writes off two months of one physician's work. If the start date cannot move, at least schedule that clinician with Medicare patients and self-pay patients first, since Medicare's retroactive rule is the most generous.
Questions we hear
Our new physician was credentialed at her previous group with the same payers. Why does it take so long again?
Because credentialing followed her, but contracting and enrollment did not. She has to be linked to your tax ID and your group agreement, and most payers re-verify at least the license and sanctions before doing so. Expect it to be faster than a first-time file, but not instant.
Can we bill under the supervising physician's NPI while the new one is pending?
Not as a workaround. Billing one clinician's services under another's NPI is misrepresentation unless a specific rule allows it, such as Medicare's incident-to rules for certain services or locum tenens billing with modifier Q6 for a physician who is temporarily absent. A new hire replacing nobody does not fit either. Ask counsel before relying on any of them.
What is the single document we should demand from each payer before the provider sees patients?
Written confirmation of the effective date for the individual NPI under your group NPI and tax ID, for each product you participate in. A committee approval letter is not that. A portal screenshot showing the provider with an effective date is close. A paid test claim is the real proof.
What to do this week
- Read your participation agreement with each major payer and note whether new providers are covered automatically or must be added by amendment.
- Build a per-payer tracking grid with three columns, credentialing, contracting and enrollment, and a date and contact name in each cell.
- For any provider who started in the last 90 days, confirm the enrollment effective date in each payer system rather than relying on the approval letter.
- File PECOS applications before the start date for every new clinician, and calendar the 30-day retroactive window.
- Set a re-attestation reminder in CAQH every 100 days so no profile goes stale while a payer is trying to pull it.
