Credentialing, enrollment, contracting: three processes hiding in one word

The three processes, told apart

Getting paid by a health plan takes three separate approvals that solo practices routinely collapse into one word. The first, credentialing, is the plan verifying that you are who you say you are and qualified to treat its members. The second, enrollment, is the administrative act of registering you in the system that issues payment. The third, contracting, is the legal agreement that sets your in-network status and the rate you are paid. They run on different clocks, and none of them alone lets you send a clean claim.

• Credentialing answers "are you legitimate?" — a quality-and-safety gate. The plan checks your license, education, training, work history, and disciplinary record against original sources.
• Enrollment answers "where does the money go?" — a plumbing step. It attaches your identifiers, tax details, and pay-to information to the payer's claims system.
• Contracting answers "on what terms?" — the deal. It defines the fee schedule, the covered services, the appeal windows, and every obligation you accept in exchange for network status.

The confusion is understandable, because for a commercial plan the three often move together in one onboarding packet. But they are distinct legal and administrative events, and knowing which one you are waiting on is the difference between a productive follow-up call and three wasted weeks.

Credentialing: the plan verifies you are real and qualified

Credentialing is the vetting process a health plan runs before it will let you treat its members, and it follows a published standard rather than each payer's whim. Under the framework most plans follow, the plan performs primary-source verification of your license, education, and board status, queries the National Practitioner Data Bank, and works within a verification-aging window so nothing on file is stale — then recredentials you at least every three years 1Ref 1National Committee for Quality Assurance (2026).Credentialing — NCQA.The credentialing framework payers follow — primary-source verification of license and education, the NPDB query, the verification-aging window, and recredentialing at least every 36 months.. That standard is why credentialing asks what it asks and takes the time it takes.

Most of what a commercial plan verifies, it pulls from your CAQH profile rather than from a form you mail in. CAQH operates the provider data portal that most commercial payers require, holds your self-reported profile, and expects you to re-attest to it periodically so payers can trust the copy they pull 2Ref 2CAQH (2026).CAQH.That CAQH operates the provider data portal most commercial payers require, holding self-reported profiles clinicians must re-attest to periodically.. You build the profile once and then maintain it; a stale or unattested profile is one of the most common reasons an application simply stops moving.

The National Practitioner Data Bank deserves its own line. It collects malpractice payments and adverse licensure or privilege actions, hospitals and many plans query it during credentialing, and the public cannot query an individual practitioner 3Ref 3Health Resources and Services Administration (2026).National Practitioner Data Bank.What the NPDB collects — malpractice payments and adverse licensure or privilege actions — and that plans query it in credentialing while the public cannot query an individual.. Whatever it holds about you, a credentialing committee will see — so nothing on it should surprise you when you apply.

Credentialing also keys off your individual identifier. The plan credentials the clinician, not the business, which is why the distinction between NPI-1 and NPI-2 — your personal NPI versus your organization's — matters here and again at enrollment. Get your NPI enrollment records clean before you apply; a mismatch between the name on your license, your NPI, and your CAQH profile is a classic silent stall.

Enrollment: getting into the system that pays you

Enrollment registers you in one specific payer's or program's payment system so that a claim can route to you and money can come back. It is administrative rather than evaluative — the judgment already happened in credentialing — but for government programs enrollment is where nearly everything happens, because there is no separate negotiation to follow it.

For Medicare, CMS publishes the whole enrollment pathway: the application types for an individual versus a group, the five-year revalidation cycle, and the rules that govern your effective date and any limited retrospective billing 4Ref 4Centers for Medicare & Medicaid Services (2026).Provider and Supplier Enrollment.That CMS publishes the Medicare enrollment pathway, including application types, the revalidation cycle, and the effective-date and limited retrospective-billing rules.. You transact all of it — the initial application, revalidations, reassignment of your benefits to a group, and later changes — inside PECOS, using an Identity & Access login tied to you 5Ref 5Centers for Medicare & Medicaid Services (2026).Medicare PECOS.That Medicare enrollment — initial application, revalidation, reassignment, and changes — is transacted in PECOS with an Identity & Access login.. There is no rate to negotiate; enrolling means accepting the Medicare Physician Fee Schedule and the program's terms.

Medicaid works the same way in spirit but is run by your state. Medicaid provider enrollment is state-administered under federal screening rules — providers are sorted into risk categories and must revalidate at least every five years — so the application, the portal, and the fee schedule all live with your state's Medicaid agency, not with CMS 6Ref 6Centers for Medicare & Medicaid Services (2026).Provider Enrollment.That Medicaid provider enrollment is state-administered under federal screening rules, with revalidation at least every five years, so it runs through the state agency.. Two states rarely look identical, which is why the national method stops here and the specifics belong to your state's program.

Commercial payer enrollment usually means two smaller steps once you are credentialed and contracted: being added to the group's roster under the right pay-to versus practice location addresses, and completing EDI enrollment so your claims, remittances, and EDI transactions flow electronically through the clearinghouse instead of on paper. Neither is glamorous, and both are frequent points of failure — a payer that has credentialed and contracted you can still reject claims for months because the EDI enrollment or the pay-to address was never finished.

Contracting: the agreement that sets your rate

Contracting is the legal participation agreement that makes you in-network and defines what you will actually be paid. This is the only one of the three processes where the terms are, at least sometimes, negotiable — and it is also the one solo practices skim past fastest, which is expensive, because the contract controls the money for years.

Government programs do not contract in this sense. Enrolling in Medicare or Medicaid means accepting a published fee schedule and a fixed set of program rules; there is no rate conversation. Commercial plans are the opposite: they sign you to a participation agreement with a fee-schedule exhibit, a covered-services scope, timely-filing limits, appeal windows, and an amendment clause that lets the plan change policies during the term.

A contract also pulls in documents you never signed. Commercial agreements incorporate the payer's own published medical and reimbursement policies by reference, and those policies change on the payer's schedule, not yours. A payer such as Anthem publishes its clinical and reimbursement policies on its provider portal, and a participation agreement typically binds you to whatever the current version says 7Ref 7Anthem (2026).Anthem Provider Policies.Anthem's own published provider policies as a named example of a payer publishing the medical and reimbursement policies a participation agreement incorporates by reference — your contract controls.. Payers differ, and your contract controls — so read what the agreement points to, not just the pages you sign.

If you cannot get a direct contract with a plan, or the rate offered is too low to accept, an independent practice association can be a route into networks — effectively renting an IPA's existing payer-contracting relationships in exchange for a share of the terms. It is a legitimate on-ramp for a solo practice, with its own trade-offs to weigh against a direct agreement.

How the three fit together, and why the order matters

The three processes are sequential more often than parallel, and the sequence is what trips people up. As a rule, credentialing must clear before a commercial contract goes effective, enrollment attaches the payment plumbing, and only the contract's effective date — not the day your credentialing was approved — governs when you can bill. Government programs fold credentialing into enrollment, so there is one date to track instead of three.

Read across any row and you can see why a single "am I on the panel yet?" question rarely has a single answer. A commercial plan can have finished credentialing you while the contract sits unsigned in someone's queue; Medicare can show you as enrolled while your reassignment to a group is still pending. Naming the specific process you are waiting on turns a vague delay into a concrete follow-up.

Where solo practices get tripped up

The costliest mistakes all come from treating the three processes as one. Credentialed does not mean contracted, contracted does not mean enrolled, and none of the three means "able to bill today." Below are the traps that most often cost a solo practice real revenue, each of which disappears the moment you know which process you are actually in.

• Seeing patients before the effective date. Your billing rights start on the contract's or enrollment's effective date, not on the day you were approved or the day of the first appointment. Some payers and programs allow limited retrospective billing back toward the application date, but the rules and windows vary — confirm your effective date and any retro window in writing before you schedule.
• Confusing the individual and the group. If you bill under a group, you may be credentialed and enrolled as an individual but still need your benefits reassigned to the group's identifier before a claim pays. This is the NPI-1 versus NPI-2 problem again, now on the money side.
• Letting the CAQH profile go stale. A profile that is unattested or out of date silently pauses every commercial application pulling from it. Re-attestation is a recurring calendar item, not a one-time task.
• Skipping the contract's incorporated policies. The rate on the fee-schedule exhibit is not the whole deal; the medical and reimbursement policies the contract references decide what actually gets paid.
• Deciding to do it all yourself without pricing the alternative. The DIY versus delegated credentialing decision is a real one — a credentialing service costs money but buys back the hours these steps consume, and the math changes as you add panels or staff.

What to do first

Start by finding out what the payers will see about you, then build the profile they pull, then choose your targets in order — before you touch a single application. Doing these things first is what separates an enrollment that takes weeks from one that stalls for months over an avoidable surprise.

• Self-query the NPDB. For a small fee, any practitioner can self-query the National Practitioner Data Bank and see exactly what a credentialing committee will see 8Ref 8Health Resources and Services Administration (2026).NPDB Self-Query.That any practitioner can self-query the NPDB for a small fee and see exactly what a credentialing committee will see, before applying.. Do this before you apply anywhere, so anything on file is something you can explain rather than something that ambushes your application.
• Build and attest your CAQH profile. Sign in to the CAQH portal to create the profile, upload your license, malpractice face sheet, education, and work history, and attest to it 9Ref 9CAQH (2026).CAQH Provider Data Portal Sign In.The CAQH portal sign-in where a clinician creates, maintains, and re-attests the profile payers pull — the where-to-do-it step.. This one artifact feeds most commercial credentialing, so making it complete and current pays off on every application at once.
• Choose which panels first. You do not have to apply to everyone at once. Sequence by where your patients' coverage actually is and by which plans pay acceptably, and let the slower government enrollments run in the background while faster commercial ones proceed.
• Get your identifiers and addresses right. Confirm your NPI records, your tax details, and your pay-to versus practice location before you file, because a mismatch discovered mid-application resets the clock.
• Decide DIY or delegated, honestly. Price a credentialing service against your own hours before you commit, and revisit that decision when you hire — credentialing your first employee and scaling into a group is a different, larger job than credentialing yourself.