Provider Credentialing — Why It Takes 60-120+ Days
Quick Answer
Provider credentialing is the systematic process of verifying a healthcare provider's qualifications, education, training, licensure, certifications, and professional history before they are authorized to provide care at a healthcare facility or participate in insurance networks. It is a risk management and quality assurance process required by the Joint Commission, CMS, state regulations, and insurance payers.
Provider credentialing is the process that stands between a qualified healthcare provider and their ability to treat patients at your facility. It is also one of the most time-consuming, frustrating, and opaque processes in healthcare administration. This guide explains what credentialing involves, why it takes 60 to 120+ days, where the bottlenecks are, and what you can do to accelerate it.
What Is Provider Credentialing?
At its core, provider credentialing is a verification process. Before a provider can treat patients at a healthcare facility, bill insurance companies, or participate in government programs like Medicare and Medicaid, their qualifications must be independently verified.
"Independently verified" is the key phrase. It is not sufficient for a provider to show you their medical license and board certification card. Your organization must verify each credential directly with the issuing source (primary source verification). This is the fundamental requirement that drives the length and complexity of the credentialing process.
The 6 Stages of Provider Credentialing
Application Collection (Week 1-2)
The provider completes a comprehensive application that includes personal information, education history, training history, work history (typically 5 to 10 years), malpractice claims history, criminal history, sanctions history, and attestation statements. Many providers use the CAQH ProView universal application, which pre-populates some data.
Common Delay: Incomplete applications are the #1 cause of delay. Providers often leave gaps in work history, forget to sign attestations, or provide expired documents.
Primary Source Verification (Week 2-8)
This is the most time-consuming stage. Your credentialing team (or CVO) contacts each verification source directly: medical school for education verification, residency/fellowship programs for training verification, state medical boards for license verification, specialty boards for certification verification, DEA for registration verification, NPDB for query results, OIG/SAM for exclusion checks.
Common Delay: Medical schools and training programs can take 2 to 6 weeks to respond. International medical graduates face even longer verification timelines (8 to 12 weeks).
Reference Checks (Week 3-6)
The organization contacts professional references (typically 3 or more) who have directly observed the provider's clinical work. References must be from peers who can attest to the provider's competence, judgment, and professionalism.
Common Delay: References are notoriously slow to respond. Many require multiple follow-up contacts before providing a response.
File Review and Analysis (Week 6-10)
Once all verifications are received, the credentialing coordinator reviews the complete file for: consistency across documents, red flags (gaps, malpractice history, sanctions, disciplinary actions), completeness (all required documents present and current), and compliance with organizational bylaws and policies.
Common Delay: Any discrepancy requires investigation and resolution, which can add 1 to 3 weeks to the timeline.
Committee Review and Approval (Week 8-12)
The completed credentials file is presented to the medical staff committee (or credentials committee) for review and recommendation. The committee recommends approval, conditional approval, or denial. The governing board then takes final action on the recommendation.
Common Delay: Many committees meet monthly. If a file misses the meeting cutoff by one day, it waits another month for review.
Privileging and Enrollment (Week 10-16)
After credentialing approval, the provider is granted specific clinical privileges. Simultaneously (or subsequently), the provider is enrolled with insurance payers and government programs. Payer enrollment adds another 30 to 90 days to the overall timeline before the provider can bill.
Common Delay: Payer enrollment processes are notoriously slow and opaque, with limited ability to expedite.
Would You Pass a CMS Survey Today?
Free 3-minute survey-readiness audit walks through every Condition of Participation. CFR-cited gaps, no signup, no email. Built for HHA, hospice, and SNF compliance leads.
Why Primary Source Verification Is the Biggest Bottleneck
Primary source verification (PSV) accounts for approximately 60% of the total credentialing timeline. Here is why:
| Verification Source | Typical Response Time | Notes |
|---|---|---|
| State Medical Board | 1-4 weeks | Some offer real-time online verification; others require written requests |
| US Medical School | 2-4 weeks | Some use NCCRS; others require direct contact with the registrar |
| International Medical School | 4-12 weeks | ECFMG certification can be used as a proxy for education verification |
| Residency Program | 2-6 weeks | Academic medical centers are typically slower than community programs |
| Specialty Board (ABMS) | 1-2 weeks | Most offer online verification portals |
| DEA | Immediate (online) | NTIS provides real-time verification |
| NPDB | 1-2 days | Electronic querying available with registered account |
Credentialing vs. Privileging: The Key Distinction
Credentialing
Answers the question: "Is this provider qualified?"
- Verifies education, training, licensure
- Confirms identity and professional history
- Checks for sanctions, exclusions, malpractice
- Required by Joint Commission, CMS, payers
- Outcome: credential file with verified documentation
Privileging
Answers the question: "What is this provider authorized to do here?"
- Defines specific clinical activities authorized
- Based on training, competence, facility needs
- Facility-specific (varies by organization)
- Requires medical staff committee approval
- Outcome: privilege delineation form listing approved activities
Strategies to Accelerate Credentialing
How Audit-Ready Are You?
Take our 30-second compliance check to see where your system stands. No email required.
Frequently Asked Questions
Provider credentialing is the systematic process of verifying a healthcare provider's qualifications, education, training, licensure, certifications, and professional history before they are authorized to provide care at a healthcare facility or participate in insurance networks. It is a risk management and quality assurance process required by the Joint Commission, CMS, state regulations, and insurance payers. Credentialing typically involves collecting 15 to 25 documents per provider and independently verifying key credentials through primary source verification.
Initial credentialing typically takes 60 to 120 days from application submission to approval. The most common timeline is 90 days. However, delays are frequent, and many providers report processes extending to 150 to 180 days. The biggest bottlenecks are primary source verification (waiting for medical schools, training programs, and state boards to respond to verification requests), incomplete provider applications (missing documents, unsigned forms, gaps in work history), and committee scheduling (many organizations require medical staff committee approval, which may only meet monthly). FileFlo helps organizations accelerate credentialing by centralizing document collection and automating follow-up on verification requests.
Credentialing verifies that a provider is who they say they are and has the qualifications they claim: verified education, training, licensure, and certifications. Privileging is the separate process of determining what specific clinical activities a provider is authorized to perform at your facility, based on their demonstrated competence and the facility's scope of services. A surgeon may be credentialed (verified as a licensed, board-certified surgeon) but privileged only for specific procedure types based on their training and experience. Both are required by the Joint Commission and CMS.
Even when a provider has active, verified credentials at another facility, each new facility must independently verify those credentials. There are no shortcuts in primary source verification: each organization must verify directly with the issuing source. This is because the Joint Commission, CMS, and NCQA require each facility to perform its own verification. Additionally, each facility has its own privilege delineation criteria, policy requirements, and medical staff committee review process. The provider's existing credentials do not transfer; they must be independently confirmed.
A CVO is a third-party organization that performs primary source verification on behalf of healthcare facilities. NCQA-certified CVOs meet standardized verification requirements accepted by most payers and accrediting bodies. Using a CVO can reduce the internal workload of credentialing staff and may accelerate verification timelines because CVOs have established relationships with verification sources. However, CVOs add cost ($150 to $500 per initial verification) and the facility still retains responsibility for the final credentialing decision.
Generally no, but there are exceptions. Provisional or temporary privileges may be granted in specific circumstances: when a new provider is needed urgently for patient care continuity, when the provider has a clean application with no red flags, and when the medical staff leadership approves the provisional arrangement. Provisional privileges are typically limited to 120 days and require that the credentialing process be underway. The Joint Commission has specific standards governing temporary privileges. However, best practice is to complete credentialing before the provider begins clinical duties.
Related Articles
Continue learning about compliance and operational excellence
Healthcare Credentialing Checklist: Every Document Per Provider
Complete credentialing document checklist covering medical licenses, DEA registrations, board certifications, malpractice insurance, and privileging files.
A Provider's License Lapsed: What Are the HIPAA and Liability Consequences?
When a provider's license lapses, your organization faces HIPAA violations, malpractice exposure, payer clawbacks, and potential criminal liability.
Healthcare Credentialing Compliance Software: Automate Provider Management
Automate healthcare credentialing: license verification, privilege tracking, payer enrollment, and audit-ready documentation for multi-site systems.