Key insight: More than 74 million Americans depend on Medicaid for their healthcare, but credentialing delays and inaccurate provider directories mean that enrollment on paper does not always translate into care in practice. On World Patient Safety Day, it is worth naming that plainly: a credentialing failure is a patient safety failure.

One in Five Americans, and Still Waiting for Care

More than 74 million people were enrolled in Medicaid and the Children's Health Insurance Program (CHIP) across the 50 states and the District of Columbia as of March 2026. That is roughly one in five Americans depending on a program whose value is determined almost entirely by one question: can they actually get an appointment?

For a meaningful share of them, the answer is still no. And while the conversation about Medicaid access tends to begin and end with reimbursement rates, the operational machinery that decides which providers are available deserves far more attention than it gets. Ask a physician why they are not accepting new Medicaid patients and low payment rates are the answer you will hear most often. But the research connecting Medicaid payment levels to actual access improvements is thinner than the conventional wisdom suggests (MACPAC, January 2025). Rate increases are expensive, politically difficult, and slow to move the needle.

The literature on insurance acceptance points to something more actionable. Lower Medicaid acceptance relative to private insurance is attributed to three factors together: low reimbursement, a patient population with more complex social and clinical needs, and a substantially higher administrative burden (PMC6452575). Two of those three are hard for a state agency to change quickly. The third is not.

Why Acceptance Lags

Three factors. One a state agency can act on now.

Select a factor for detail. The third is the operational lever.

1
Low ReimbursementHard to change quickly

The answer most often heard when a physician is asked why they are not accepting new Medicaid patients.

2
Complex Patient NeedsNot an administrative lever

A patient population with more complex social and clinical needs than commercially insured populations.

3
Administrative BurdenSolvable without legislation

Substantially higher administrative burden than commercial credentialing, and the one lever a state agency can pull now.

Administrative Burden

Medicaid credentialing carries requirements commercial credentialing does not: state-specific enrollment applications, federal screening and risk-categorization rules under 42 CFR Part 455 Subpart E, site visits and fingerprinting for higher-risk provider types, ownership and disclosure attestations, and revalidation cycles on a fixed clock. This is where credentialing lives, and it can be reduced without a legislative appropriation.

Lower Medicaid acceptance relative to private insurance is attributed to these three factors together. Sources: PMC6452575; MACPAC, Evaluating the Effects of Medicaid Payment Changes on Access to Physician Services, January 2025.

The Administrative Barrier Is the Solvable One

Administrative burden is where credentialing lives, and it is the one lever a state Medicaid agency can pull without a legislative appropriation. Medicaid credentialing carries requirements commercial credentialing does not: state-specific enrollment applications, federal provider screening and risk-categorization rules (42 CFR Part 455, Subpart E), site visits and fingerprinting for higher-risk provider types, ownership and disclosure attestations, and revalidation cycles that repeat the whole exercise on a fixed clock. A provider who is fully credentialed with three commercial payers may still be months away from seeing their first Medicaid patient.

Each of those months carries a direct cost. A newly hired physician at a community health center who cannot bill Medicaid is a physician the center is paying without revenue. That calculation leads practices to cap or close their Medicaid panels. The burden compounds for patients too: Medicaid enrollees must already work harder to find care, particularly specialty care, and inaccurate provider directories, a downstream effect of outdated credentialing and roster data, send them to wrong addresses, disconnected numbers, and providers who stopped accepting Medicaid months ago.


Credentialing Is Patient Safety Infrastructure

On World Patient Safety Day, it is worth naming what credentialing delays actually mean for patients. Credentialing is not primarily an administrative function; it is a patient safety function. Licensing boards and federal exclusion databases exist because a patient seeking care has a right to know that the provider treating them holds a current license and has not been sanctioned or excluded from federal programs for fraud or patient harm. When credentialing is delayed, qualified providers cannot reach patients who need them. When monitoring lapses between revalidation cycles, providers with revoked credentials or active sanctions may continue seeing patients without detection.

The damage in either case is clinical, not clerical. The World Health Organization identifies inadequate provider screening and credential management as a system-level patient safety issue alongside medication errors and healthcare-associated infections. Provider credential management is exactly the kind of system-level function that produces harm through omission rather than commission, and it is the kind of failure that well-designed infrastructure can prevent.

Two Failure Modes

The damage is clinical, not clerical.

Both tracks end at patient harm. Select any step for detail.

Credentialing delay
1Application enters manual processing
2Qualified provider cannot bill
3Practice caps or closes its panel
4Patient loses access
Monitoring gap
1Credentials verified at a point in time
2Lapse or sanction goes undetected
3Provider continues practicing
4Patient is exposed
Both tracks end here

Credentialing is not primarily an administrative function. It is a patient safety function.

The World Health Organization identifies inadequate provider screening and credential management as a system-level patient safety issue alongside medication errors and healthcare-associated infections.

What Modern Credentialing Technology Changes

Modern credentialing technology addresses each of these failure modes directly.

Automated primary source verification pulls licensure records, Drug Enforcement Administration (DEA) registration status, board certifications, sanctions, and OIG (Office of Inspector General) exclusion checks from authoritative sources on a scheduled basis, rather than assembling them manually from faxed attestations. This removes the single largest source of processing delay and the most common cause of application rework.

Continuous monitoring replaces point-in-time review. Revalidation cycles exist because credentials expire and sanctions are issued between formal review events. A continuous monitoring system flags a lapsed license or a new exclusion the week it occurs, which reduces both the scope of the formal revalidation event and the monitoring gap that is, in the patient safety sense, the more consequential one.

A centralized verification layer with Application Programming Interface (API) access lets downstream entities consume one validated record rather than building their own. When a state agency, its managed care organizations (MCOs), and delegated entities each maintain separate provider records, the same physician is verified multiple times and the directories still disagree. A single source of truth eliminates the redundancy and closes the directory accuracy gap that Medicaid enrollees directly experience.

Real-time status transparency replaces the opaque queues of manual processing. Real-time visibility into where an application sits and what is blocking it eliminates substantial phone volume and prevents the quiet abandonment of half-finished enrollments.

What Technology Changes

Four failure modes, addressed directly

Toggle to compare approaches.

Where the delay and the gap originate
Manual primary source verification

Licensure, DEA registration, board certifications, sanctions, and OIG exclusion checks assembled by hand from faxed attestations. The single largest source of processing delay and the most common cause of application rework.

Point-in-time review

Credentials confirmed at credentialing and again at revalidation, leaving the interval between formal review events unmonitored.

Siloed provider records

A state agency, its managed care organizations, and delegated entities each maintain separate records. The same physician is verified multiple times and the directories still disagree.

Opaque application queues

No visibility into where an application sits or what is blocking it, which drives phone volume and the quiet abandonment of half-finished enrollments.

CareLumi's technology-enabled credentialing workflow platform facilitates automated primary source verification, continuous credential monitoring, and maintenance of a single validated provider record. Third-party review timelines, enrollment approvals, and directory update decisions remain outside any platform's control.

What State Agencies Can Do Now

State Medicaid agencies can shorten the distance between a provider deciding to serve Medicaid patients and seeing their first one. The levers are operational, not legislative: publishing credentialing cycle-time targets as a public performance metric creates accountability for the process; accepting centralized verification for delegated entities reduces redundant verification effort; aligning revalidation schedules with continuous monitoring reduces the disruption and cost of periodic review events; and tying directory accuracy obligations to the credentialing data layer addresses the downstream experience that enrollees actually navigate.

Community health centers are a fitting place to start. They serve a disproportionately Medicaid-enrolled population and operate on margins that make every unbillable week of a new hire's tenure material. They are also, in many communities, the only realistic point of access.

CareLumi's agentic solutions are designed for exactly this challenge. The platform facilitates automated primary source verification, continuous credential monitoring, and maintenance of a single validated provider record that downstream delegated entities can access directly. Third-party review timelines, enrollment approvals, and directory update decisions remain outside any platform's control. On World Patient Safety Day, the connection is worth making explicit: getting credentialing infrastructure right is access policy, and access policy is patient safety policy.


Sources

Charlotte Mooney is a Product Design Intern at CareLumi.