Prior authorization under Medicaid

Medicaid is not a single national plan. The federal government sets broad requirements and provides matching funds, while each state designs and administers its own program within those rules. The practical consequence for prior authorization is that there is no universal Medicaid authorization list. The procedures, drugs, and durable medical equipment that require review are defined state by state, and they are revised as budgets, policies, and clinical guidelines change. A requirement that applies in one state may not apply in another, and a requirement in place last year may have been added or removed since.

A second structural difference is that most states deliver Medicaid through more than one channel at once. Some enrollees receive care through traditional fee-for-service, where the state agency or its utilization-management contractor administers benefits directly. Many others are enrolled in managed care organizations that contract with the state and administer their own authorization rules within the state's requirements. Confirming which channel a member is in — through eligibility verification — is the first step, because it determines who sets the rule and where a request is sent. General guidance on verifying Medicaid eligibility describes how to identify the responsible plan before any care is scheduled.

The two delivery models share the same purpose but route the work differently. Under fee-for-service, requirements live in the state Medicaid provider manual and fee schedule, and requests go to the state agency or its designated vendor. Under managed care, each contracted plan publishes its own provider manual and portal, and the request goes to the specific plan in which the member is enrolled. The comparison below shows the dimensions that most often change between the two models; the details within each cell are set by the individual state or plan and should be confirmed against the current source.

State flexibility sits on top of a federal floor. Several protections apply regardless of state design, and they shape how authorization must be handled. Federal managed care regulations require plans to decide standard and expedited authorization requests within outer time limits and to give enrollees notice and appeal rights when a request is denied. Coverage rules for children are broader than for adults: the Early and Periodic Screening, Diagnostic, and Treatment benefit obligates state programs to cover medically necessary services for enrolled children and adolescents under 21, which affects how necessity is evaluated. The federal interoperability and prior authorization rule adds standardized electronic processes and status transparency across Medicaid, the Children's Health Insurance Program, and other government programs over a phased timeline.

• Decision timeframes: federal managed care rules set outer limits for standard and expedited determinations; the exact figures are defined in regulation and can be shortened by state contract — check the current source rather than assuming a number.
• Coverage for children: the Early and Periodic Screening, Diagnostic, and Treatment benefit requires state programs to cover medically necessary care for enrollees under 21.
• Notice and appeal rights: enrollees must receive written notice of an adverse decision and a defined path to challenge it, including a state fair hearing.
• Standardized electronic processes: the CMS Interoperability and Prior Authorization rule phases in electronic submission and status reporting across Medicaid and related programs.
• Drug review: state pharmacy programs and preferred drug lists commonly use step therapy, covered in more depth under prior authorization for medications.

Despite the variation, the operational sequence is consistent. The difference is where each step is verified. The steps below follow the same structure as the broader prior authorization workflow, adapted for Medicaid's dual delivery models.

1. 01

   Confirm the delivery model and plan

   Verify whether the member is in fee-for-service or a specific managed care plan, since that determines who sets the requirement and where the request is submitted.
2. 02

   Check the current authorization list

   Consult the state manual or the plan portal for the specific service, drug, or item. Lists are revised, so a prior result should not be assumed.
3. 03

   Confirm provider enrollment

   Rendering and billing providers generally must be enrolled with the state Medicaid program even when serving managed care members. See Medicaid provider enrollment for how enrollment interacts with claims and authorization.
4. 04

   Assemble medical-necessity documentation

   Gather the clinical records that support the request against the applicable criteria, including any child-specific standards where they apply.
5. 05

   Submit and record the authorization number

   Send the request through the correct channel and capture the authorization number, approved units, and effective dates so billing can match them later.
6. 06

   Track the decision against the timeframe

   Monitor the request against the applicable standard or expedited deadline, and escalate if the decision is not returned within the plan's or state's limit.

When a request is denied, Medicaid layers enrollee protections on top of the usual provider remedies. A managed care denial ordinarily goes first through the plan's internal appeal, and many programs also offer a clinician-to-clinician discussion, or peer-to-peer review, before or during that process. If the internal appeal is unsuccessful, the enrollee generally retains the right to a state fair hearing. It is important to distinguish an authorization denial — a coverage decision that can be appealed — from a claim edit that can be corrected and resubmitted. Handling of authorization-related claim problems is covered under authorization-related denials, and the general escalation ladder appears in approvals, denials, and peer-to-peer review.

Internal (plan) appeal

In managed care, the plan-level review of an adverse authorization decision, which typically must be exhausted before a state hearing.

Medicaid fair hearing

A state administrative hearing available to enrollees to challenge a coverage decision after plan or agency remedies are used; timeframes and procedures are set by each state.

Continuation of benefits

Under certain conditions during an appeal, some ongoing services may continue while the decision is reviewed, as defined by state rules.

An approval does not guarantee payment. The claim must still reflect an eligible member, the correct plan, coordination with any other coverage, matching authorized units, and submission within the applicable timely filing window. For comparison with the parallel government-sponsored model, see how these rules differ under Medicare Advantage.