Credentialing and enrollment are run by the same office, in the same week, on the same practitioners, and they are not the same process. Credentialing establishes that a practitioner is who they say they are and is competent to practise, and it is done by the organisation and by each health plan. Enrollment establishes that a payer will pay for that practitioner's services, and it is done with Medicare, Medicaid and each commercial plan separately. Confusing them is what produces the situation every practice administrator recognises: a physician who is fully credentialed, working, and generating claims that cannot be billed. This page separates the two, names who requires what, and sets out the cycles that have to be diarised.
What credentialing actually proves
Credentialing is verification, not paperwork collection. Under the Medicare Advantage rules, initial credentialing of physicians and other health care professionals covers a written application, verification of licensure or certification from primary sources, disciplinary status and eligibility for payment under Medicare, with site visits as appropriate, and the application must be signed and dated with an attestation by the applicant that it is correct and complete (42 CFR 422.204(b)(2)(i)). The load-bearing words are primary sources: a copy of a licence supplied by the applicant proves nothing, because the point of the exercise is to hear it from the issuing body.
What enrollment actually proves, and why it lags
Enrollment is the payer's decision that claims for this practitioner, at this location, under this group's billing arrangement, will be paid. It is a separate application per payer, it depends on the credentialing being finished first, and it is the step that stretches the timeline, because a practitioner can be credentialed by the organisation and still be weeks or months away from being billable by a given plan. The practical consequence is that a start date agreed by a recruiter without reference to the enrollment queue creates revenue the organisation cannot collect, and that conversation belongs at offer stage, not at onboarding.
The cycles that cause the lapses
Neither process is finished when it is finished. Recredentialing runs at least every 3 years for physicians and other health care professionals under a Medicare Advantage contract, updating the initial information and considering performance indicators, with a fresh attestation (42 CFR 422.204(b)(2)(ii)). Medicare enrolment revalidation runs on its own clock: a provider or supplier other than a DMEPOS supplier must resubmit and recertify its enrolment information every 5 years (42 CFR 424.515), and a DMEPOS supplier every 3 years (42 CFR 424.57(g)). Underneath those sit the practitioner's own licence, DEA registration, board certification and malpractice expiries, each on a different date.
Why one register and not four
Every lapse this office suffers comes from the same structural fault: the dates live in different places, so nobody sees them together. The fix is unglamorous and it works. One row per practitioner, one column per date, every payer enrolment and every credential on the same row, reviewed on a fixed cadence with a look-ahead long enough to act, ninety days for most items and longer for revalidations. What makes this hard by hand is not the concept but the maintenance, which is the honest argument for keeping it in a system rather than a spreadsheet somebody owns personally.
Questions people ask about credentialing and enrollment
Can a practitioner see patients before enrollment is complete?
That is an organisational and payer question rather than a credentialing one, and the answer differs by plan and by state. What is certain is that the claims position is different from the clinical position, and an organisation that starts a practitioner without knowing which payers will pay retroactively is choosing to carry that risk.
Is delegated credentialing worth pursuing?
For larger groups it shortens the payer-side wait considerably, because the plan accepts the organisation's own verification against an agreed standard. It also moves the audit burden onto the organisation, so it is worth it when the credentialing file is already run to a documented standard and a poor idea when it is not.
How far ahead should recredentialing be started?
Work backwards from the cycle rather than forwards from the last date. Primary source verification takes time you do not control, so most offices open a recredentialing file several months before the deadline and treat the deadline itself as the failure point, not the target.