
Each state enrolls behavioral health facilities in Medicaid separately, after verifying the state facility license. Federal rules require screening by risk level, checks on every 5 percent owner and managing employee, site visits for moderate and high risk providers, a signed provider agreement and revalidation at least every five years. Managed care plans then credential separately.
Medicaid is a separate program in every state, so a behavioral health facility enrolls with each state's Medicaid agency on its own. Enrollment is not a formality layered on top of licensing; it is built on it. Federal rules require the state to verify that a provider claiming a license actually holds it, that it has not expired and that it carries no current limitations (42 CFR 455.412). A program without its state facility license or certification is not ready to enroll.
What follows is the federal floor every state must meet under 42 CFR Part 455, subpart E, plus examples of what states add for treatment facilities. Each state's provider manual and enrollment portal control the details.
What does the state verify before enrolling a facility?
Every enrolled provider must be screened (42 CFR 455.410). The screening depends on the risk category the state assigns to the provider type, and the floor for every category includes:
- Federal and state requirements for the provider type, verified before the enrollment decision (455.450(a)(1)). For a treatment facility that means the license or certification for the services you will bill.
- License verification, including licenses in other states (455.450(a)(2), 455.412).
- Database checks before and after enrollment. The state confirms the identity and exclusion status of the provider and of every owner, agent and managing employee, checking the Social Security death master file, NPPES, the OIG exclusion list and the federal excluded parties list, and checks the exclusion lists at least monthly (455.436).
Moderate-risk providers also get site visits; high-risk providers add a criminal background check and fingerprints (455.450(b) and (c)). States set their own risk categories for Medicaid-only provider types, and a state must raise a provider to high risk after events such as a payment suspension or an exclusion within the past 10 years (455.450(e)).
Why does every owner matter?
More than many first-time applicants expect. Each person with a 5 percent or greater direct or indirect ownership interest is part of the screening:
- The state must terminate or deny enrollment if any such owner fails to submit timely and accurate information or to cooperate with screening (455.416(a)).
- It must deny or terminate if any such owner was convicted of a criminal offense related to Medicare, Medicaid or CHIP in the last 10 years, unless it documents that denial is not in the program's interest (455.416(b)).
- When fingerprints are required, the provider or owner must submit them within 30 days of a request (455.434(b)(2); 455.416(e)).
- A provider terminated by Medicare or by another state's Medicaid program and listed in the federal termination database must be denied or terminated (455.416(c)).
Some states go further. North Carolina's licensing statute bars a new license or Medicaid enrollment for owners, principals or affiliates tied to a recent license revocation, certain penalties or summary suspensions, and the same bars block revalidation (G.S. 122C-23(e1)). See owner and director background screening for facility licenses.
Will the state visit the site?
For moderate- and high-risk providers, yes. The state must conduct pre-enrollment and post-enrollment site visits to verify that the information submitted is accurate and that the provider meets enrollment requirements (455.432(a)). Every enrolled provider must also allow CMS, its contractors and the state to make unannounced on-site inspections of any provider location (455.432(b)), and refusing access is grounds for termination (455.416(f)). A facility should be operating, staffed and posted as licensed when it applies, not weeks later.
Is there an application fee?
States must collect the applicable application fee before executing a provider agreement with a prospective or re-enrolling provider, with exceptions: individual physicians and nonphysician practitioners are exempt, and so are providers already enrolled in Medicare or another state's Medicaid program, or that have already paid the fee to a Medicare contractor or another state (455.460(a)). A facility enrolled in Medicare usually falls within that exception; one that is not should expect the fee in each state where it enrolls.
Which promises are in the provider agreement?
Every provider signs an agreement with the Medicaid agency. Under 42 CFR 431.107(b) the provider agrees to keep records necessary to disclose the extent of services it furnishes, to furnish those records and payment information to the agency, HHS or the state Medicaid fraud control unit on request, to comply with the ownership and control disclosure rules in Part 455, subpart B, and to put its NPI on every claim. For a federally assisted substance use program those record duties sit beside 42 CFR Part 2's confidentiality rules; see the 2024 Part 2 rule.
Where do states add their own conditions?
Examples from the state rules we have verified:
- Montana pays for facility-based substance use disorder services only to a facility that holds both a DPHHS license and DPHHS state approval, and inspects approved facilities every two years.
- Oklahoma requires a facility seeking initial certification for residential, medically supervised withdrawal management or halfway house services that will enroll in Medicaid to first pass an ODMHSAS certificate of need evaluation of local bed occupancy and need. Outpatient services are not covered by it.
- California exempts Medi-Cal-enrolled Indian Health Care Providers from DHCS alcohol and other drug program certification if they meet all applicable standards.
- CCBHCs must be enrolled Medicaid providers as a condition of certification (2023 CCBHC criteria, 6.c.1). See CCBHC certification.
Our state pages record what we have verified for each state, with sources.
How often must enrollment be revalidated?
At least every five years, for every provider type (42 CFR 455.414). Revalidation repeats the screening, and the state rechecks license status and exclusions. If enrollment is deactivated for any reason, the state must rescreen the provider and collect any application fee before reactivating it (455.420). States may also impose temporary moratoria on new enrollment of a provider type, in six-month periods (455.470).
Does state enrollment cover Medicaid managed care plans?
Not by itself. Where a state delivers Medicaid behavioral health through managed care organizations, each plan credentials and contracts with facilities separately, usually after state Medicaid enrollment. That is payer paneling, which our sister site White Glove Credentialing handles; its guide to becoming a Medicaid provider explains the plan side. Medicare is separate again; a community mental health center enrolls through CMS (see Medicare enrollment for community mental health centers).
What do we prepare, and what do you sign?
Our Medicaid Facility Enrollment is $499 per state, flat. We assemble the application, the ownership and managing employee disclosures, license and accreditation evidence, and site-visit readiness for your facility. Your owner or authorized officer signs the provider agreement and every attestation, and pays any state application fee directly; where a state portal requires your own login, it stays in your account. If the facility license is not yet in place, start with our state license packages, and add Renewal Tracking ($299 a year per credential) to keep revalidation dates in view.
Common questions
- Do we need a state license before enrolling in Medicaid?
- Yes, in practice. The Medicaid agency must verify that any license a provider claims is current and unrestricted (42 CFR 455.412), and a treatment facility bills for services its license or certification covers.
- How often does Medicaid revalidate a facility?
- At least every five years under 42 CFR 455.414, with the screening repeated. A deactivated enrollment must be rescreened before it is reactivated.
- Does Medicaid enrollment get us into managed care plans?
- No. Each Medicaid managed care plan credentials and contracts with facilities separately, usually after state enrollment. Our sister site White Glove Credentialing handles that paneling.
- Who signs a Medicaid provider agreement?
- The facility's owner or authorized officer signs the agreement and its attestations. A preparer can assemble the application and disclosures, but the provider is the party to the agreement.
Need Help with Enrollment or Licensing?
We prepare your Medicare enrollment, accreditation survey and state licenses in the order CMS requires, for your official to sign, and track every one to a decision.
