Prior authorization under Medicaid

Medicaid is not a single national plan. The federal government sets broad requirements and provides matching funds, while each state designs and administers its own program within those rules. The practical consequence for prior authorization is that there is no universal Medicaid authorization list. The procedures, drugs, and durable medical equipment that require review are defined state by state, and they are revised as budgets, policies, and clinical guidelines change. A requirement that applies in one state may not apply in another, and a requirement in place last year may have been added or removed since.

A second structural difference is that most states deliver Medicaid through more than one channel at once. Some enrollees receive care through traditional fee-for-service, where the state agency or its utilization-management contractor administers benefits directly. Many others are enrolled in managed care organizations that contract with the state and administer their own authorization rules within the state's requirements. Confirming which channel a member is in — through eligibility verification — is the first step, because it determines who sets the rule and where a request is sent. General guidance on verifying Medicaid eligibility describes how to identify the responsible plan before any care is scheduled.

The two delivery models share the same purpose but route the work differently. Under fee-for-service, requirements live in the state Medicaid provider manual and fee schedule, and requests go to the state agency or its designated vendor. Under managed care, each contracted plan publishes its own provider manual and portal, and the request goes to the specific plan in which the member is enrolled. The comparison below shows the dimensions that most often change between the two models; the details within each cell are set by the individual state or plan and should be confirmed against the current source.

State flexibility sits on top of a federal floor. Several protections apply regardless of state design, and they shape how authorization must be handled. Federal regulation caps how long a standard or expedited authorization decision for items and services may take in both delivery models — one rule for contracted managed care plans and a parallel rule for state agencies operating fee-for-service — and requires notice of the decision along with appeal and fair-hearing rights when a request is denied. Drugs sit outside both of those timeframe rules — the fee-for-service rule excludes them, and the managed care rule routes covered outpatient drug decisions to a separate standard in the Social Security Act — so a drug request should not be tracked against the same clock. Coverage rules for children are broader than for adults: the Early and Periodic Screening, Diagnostic, and Treatment benefit obligates state programs to cover medically necessary services for enrolled children and adolescents under 21, which affects how necessity is evaluated. The federal interoperability and prior authorization rule adds standardized electronic processes and status transparency across Medicaid, the Children's Health Insurance Program, and other government programs over a phased timeline.

• Decision timeframes: federal rules set outer limits for standard and expedited determinations on items and services in managed care and in fee-for-service alike, while drug authorizations follow a separate rule; the exact figures are defined in regulation and can be shortened by state law or contract — check the current source rather than assuming a number.
• Coverage for children: the Early and Periodic Screening, Diagnostic, and Treatment benefit requires state programs to cover medically necessary care for enrollees under 21.
• Notice and appeal rights: enrollees must receive written notice of an adverse decision and a defined path to challenge it, including a state fair hearing.
• Standardized electronic processes: the CMS Interoperability and Prior Authorization rule phases in electronic submission and status reporting across Medicaid and related programs.
• Drug review: state pharmacy programs and preferred drug lists commonly use step therapy, covered in more depth under prior authorization for medications.

Despite the variation, the operational sequence is consistent. The difference is where each step is verified. The steps below follow the same structure as the broader prior authorization workflow, adapted for Medicaid's dual delivery models.

1. 01

   Confirm the delivery model and plan

   Verify whether the member is in fee-for-service or a specific managed care plan, since that determines who sets the requirement and where the request is submitted.
2. 02

   Check the current authorization list

   Consult the state manual or the plan portal for the specific service, drug, or item. Lists are revised, so a prior result should not be assumed.
3. 03

   Confirm provider enrollment

   Rendering and billing providers generally must be enrolled with the state Medicaid program even when serving managed care members. See Medicaid provider enrollment for how enrollment interacts with claims and authorization.
4. 04

   Assemble medical-necessity documentation

   Gather the clinical records that support the request against the applicable criteria, including any child-specific standards where they apply.
5. 05

   Submit and record the authorization number

   Send the request through the correct channel and capture the authorization number, approved units, and effective dates so billing can match them later.
6. 06

   Track the decision against the timeframe

   Monitor the request against the applicable standard or expedited deadline, and escalate if the decision is not returned within the plan's or state's limit.

When a request is denied, Medicaid layers enrollee protections on top of the usual provider remedies. A managed care denial ordinarily goes first through the plan's internal appeal. If the internal appeal is unsuccessful, the enrollee generally retains the right to a state fair hearing. It is important to distinguish an authorization denial — a coverage decision that can be appealed — from a claim edit that can be corrected and resubmitted. Handling of authorization-related claim problems is covered under authorization-related denials, and the general escalation ladder appears in approvals, denials, and peer-to-peer review.

Internal (plan) appeal

In managed care, the plan-level review of an adverse authorization decision, which typically must be exhausted before a state hearing.

Medicaid fair hearing

A state administrative hearing that federal rules make available to enrollees to challenge a coverage decision, including a prior authorization decision; in managed care it follows the plan's internal appeal, and each state's procedures operate within the federal requirements.

Continuation of benefits

Under conditions set in federal regulation — 42 CFR 438.420(b) in managed care and 42 CFR 431.230(a) in fee-for-service — previously authorized services that are being reduced, suspended, or terminated may continue while an appeal or fair hearing is pending, provided the enrollee files in time.

An approval does not guarantee payment. The claim must still reflect an eligible member, the correct plan, coordination with any other coverage, matching authorized units, and submission within the applicable timely filing window. For comparison with the parallel government-sponsored model, see how these rules differ under Medicare Advantage.