Arkansas Medicaid Provider Enrollment and Credentialing: the DHS Provider Portal, 2026 Revalidation, PASSEs, ARHOME and Novitas Medicare

Every row is its own application, decided by a different organization. The middle column lists only standards that organization or the legislature has published; none of them is a forecast for a particular file.

For physicians, Arkansas adds a layer few states have: the Arkansas State Medical Board runs a Centralized Credentials Verification Service (CCVS) that plans and hospitals use for primary-source verification, and the Board's site carries a license verification tool (armedicalboard.adh.arkansas.gov). More on the CCVS below.

Arkansas expects the portal for nearly everyone. DHS's provider enrollment page says initial applications "must be submitted electronically through the Provider Portal," with skilled nursing and long-term care facilities the only paper filers, and exceptions considered case by case only after every portal option has been tried. Its Become a Medicaid Provider page links the four portal actions you will use: start or re-enroll, resume an unfinished application, check application status, and pay the application fee.

1. Run the Required Documents Finder first. DHS publishes a spreadsheet (version 36) that lists what each provider type and specialty must attach. Upload only those items; everything else is typed into the portal screens.
2. Use current forms. DHS says outdated versions are sent back. Fillable PDFs are downloaded, completed, signed, saved and uploaded, and electronic signatures are accepted under Arkansas Code 25-31-103.
3. Individual practitioners attach the professional license or certification, an EFT authorization backed by a voided check or bank letter, and a W-9 showing the individual's name and Social Security number. DHS does not accept a deposit slip for EFT.
4. Groups attach an IRS letter (SS-4, 147C or 501(c)(3) determination), the Section IV group affiliation form, and the Ownership Disclosure Form, DMS-675, with a full board list where one applies. The group's W-9 carries the group name and tax ID.
5. Submit and record the tracking number. It is what the status screen asks for later.
6. Report the NPI after approval. DHS says a provider required to have an NPI "must report it to Arkansas Medicaid once enrolled."

One Arkansas-specific item: some rendering providers who do not hold an NPI are identified by a Medicaid Practitioner Identification Number (PIN). DHS's PIN FAQ says PIN requests must be submitted electronically in the portal effective July 15, 2025, and that the DMS-7708 is not uploaded with an electronic request. Counseling providers are pointed to their manual's staff-requirements section to tell which number a rendering provider needs.

DHS is unusually direct about why applications fail. Its enrollment page lists the top four denial reasons in order:

Address changes made before an application or revalidation go on the Provider Address Change form, DMS-673. DHS itself tells providers to update demographics with that form so revalidations are not returned for correction.

The standing rule on DHS's enrollment page is revalidation every five years, submitted at least 60 days before the due date, with automatic reminder letters from the portal. In addition, DHS says credentials must be submitted annually through the portal, and a provider terminated because credentials expired six months or more earlier has to re-enroll rather than revalidate.

On June 19, 2026, DMS issued Official Notice ON-015-26, "Federal Revalidation Guidance from CMS", which changes the timing for many Arkansas providers:

• High-risk, moderate-risk and atypical providers whose enrollment status is older than 12 months must revalidate.
• All other provider types whose enrollment status is older than two years must revalidate.
• Revalidations run in waves, high-risk providers first; the notice tells providers to watch for letters and revalidation links in the portal.
• DHS "strongly recommends" finishing within 60 days, and "revalidation is required within 90 days of the assigned date, or the provider will be terminated."

Once the off-cycle effort ends and each provider has a risk designation, the notice sets the ongoing schedule: high- and moderate-risk providers every three years, limited-risk and atypical providers every five. Questions go to the Provider Assistance Center at (800) 457-4454 or (501) 376-2211.

Arkansas screens by federal risk category, and ON-015-26 confirms DHS is assigning providers to high, moderate, limited and atypical designations. DHS posts a sample fingerprint background check letter on its enrollment page for applicants it selects for fingerprinting; the federal rule behind it (42 CFR 455.434) applies fingerprinting to high-risk providers and their 5 percent or greater owners.

On the fee, DHS says certain provider types owe an application fee set by CMS, payable every five years and subject to annual change, and that it is waived if already paid to Medicare or another state's Medicaid agency. "Individual providers and groups of individual providers" are exempt. DHS links a list of the provider types that pay the fee, and the portal has its own fee-payment link. For applications filed in calendar 2026 the federal amount is $750 (CMS-6096-N, Federal Register, December 3, 2025).

To check Arkansas Medicaid application status, open the Application Status page in the provider portal and enter the tracking number from your application. DHS publishes a Provider Enrollment Status job aid for that screen on its enrollment page. DHS recommends the online route because "there is less possibility for making errors that would result in your application being denied," and the portal prompts for any required field left blank before it lets you submit.

• Provider Enrollment: (501) 376-2211 or (800) 457-4454; press 0 for Other Inquiries, then 3 for Provider Enrollment.
• Division of Medical Services: 501-682-8292, fax 501-682-1197, P.O. Box 1437, Slot S401, Little Rock, AR 72203-1437.
• Portal lockout: DHS says six failed logins within an hour lock the account and force a password reset, so keep one person on the login rather than several guessing.

Arkansas Medicaid members with intensive behavioral health or developmental disability needs are enrolled in a Provider-led Arkansas Shared Savings Entity (PASSE), and the PASSE, not DMS, decides who is in its network. DHS's PASSE contact page lists four:

Empower's Provider Handbook (Version 1.01.2026) shows what a PASSE file involves. It credentials against CMS and NCQA standards, says "all providers must be credentialed by Empower or our delegates to participate in the network," refuses to process incomplete applications, notifies providers of discrepancies and lets them send clarifying information, may schedule a site visit, and requires an updated recredentialing application every three years. It also tells the practitioner or the group's credentialing contact the date they may begin seeing members, which is the date to bill from. Applications and questions go through its Become a Provider page or empower.network@empowerarkansas.com.

We did not find a published credentialing timeline from any of the four PASSEs, so ask each one when you apply, and keep each plan's credentialing contact current: Empower says outdated contact details are how providers miss recredentialing notices.

Arkansas runs its Medicaid expansion differently from most states. Under Act 530 of 2021 and a Section 1115 waiver, ARHOME uses Medicaid funding to buy private Qualified Health Plan coverage for adults 19 to 64 below 138 percent of the federal poverty level. DHS's ARHOME quarterly report dated March 16, 2026 says DHS buys that coverage from two carriers, Centene and Arkansas Blue Cross and Blue Shield, each offering three plans:

• Centene: Ambetter, QCA Health Plan, QualChoice Life and Health.
• Arkansas Blue Cross and Blue Shield: Arkansas Blue Cross Blue Shield, Health Advantage, Octave.

The practical consequence: an ARHOME patient's card usually belongs to one of those six plans, and the plan pays as an insurer. A practice that holds only an Arkansas Medicaid ID can still see beneficiaries DHS classifies as medically frail, who stay in traditional fee-for-service Medicaid, and those awaiting plan selection, but for everyone placed in a QHP it needs the carrier contract. That makes the Centene and Arkansas Blue Cross applications part of any serious Arkansas Medicaid plan, and they run on the commercial credentialing rules below.

Arkansas puts commercial credentialing on a statutory clock. Ark. Code 23-99-411, in the text FindLaw marks current as of March 28, 2024, requires an insurer to:

• acknowledge a provider's application in writing within 10 days of receiving it;
• review it for completeness and, if anything is missing, tell the provider in writing within 15 calendar days and list what is missing, or the application is deemed complete;
• decide within 60 calendar days of a completed application from a physician licensed under the Arkansas Medical Practices Act, or within 180 calendar days for any other provider;
• treat an approved physician as participating, for payment purposes, from the date the completed application was submitted.

The physician clock stops while the State Medical Board's verification service has the file and while the insurer waits on information it requested from the provider. An insurer may treat an application as abandoned if the missing items do not arrive within 90 days. The statute also sets a fine of $1,000 per day past the 60-day physician deadline, on top of the commissioner's other remedies. We read a reproduction, not the official Lexis text, so confirm the current wording before relying on it in a dispute.

The verification service is the Centralized Credentials Verification Service. The Board says Act 1066 of 1995 created it, Act 1410 of 1999 replaced that act and required credentialing and healthcare organizations, including insurers and HMOs, to use it once it met NCQA, Joint Commission and Department of Health standards, and the mandate took effect January 1, 2002. The Board releases a physician's verified credentials only with the physician's written authorization. For a practice, that means the physician's CCVS authorization is one more item to send promptly; a plan waiting on CCVS is not yet on its 60-day clock.

Where a carrier pulls your application data from CAQH, keep the profile attested; CAQH asks providers to re-attest every 120 days (CAQH quick reference). Our CAQH explained page walks through it, and the payer-by-payer credentialing hub covers each national plan.

Arkansas Medicare Part A and Part B enrollment is processed by Novitas Solutions, the A/B MAC for Jurisdiction H. CMS's JH award fact sheet says that on June 24, 2026 it announced Novitas had won the new JH contract for Arkansas, Colorado, Louisiana, Mississippi, New Mexico, Oklahoma and Texas, anticipated effective July 1, 2026, and that provider and supplier enrollment is part of the work. Novitas held the previous JH contract, so CMS expected few disruptions.

You file the CMS-855I (individual, including reassignment to a group) or CMS-855B (group) in PECOS, and Novitas issues the PTAN and effective date. Novitas does not need its own day count because CMS sets one for every MAC in the Program Integrity Manual, chapter 10:

Medicare's retroactive window is narrow. 42 CFR 424.521 lets physicians and non-physician practitioners bill services up to 30 days before the effective date when circumstances prevented earlier enrollment (90 days after a Presidentially declared disaster). Arkansas patients covered by the Railroad Retirement Board need a separate Railroad Medicare PTAN; our Railroad Medicare provider enrollment page covers it, and the full Medicare walkthrough is on Medicare provider enrollment.

The delays we see are mostly bad data coming from the provider side. Arkansas's own published denial list says the same thing, and its 2026 revalidation push adds new ways to lose an enrollment. What to watch:

• Three spellings of one name. DHS's first-listed denial reason. Pick the legal name once and use it on the license, IRS letter, W-9, EFT form and portal.
• The SSN/EIN swap on the W-9. DHS's second reason, and the easiest to prevent.
• A deposit slip for EFT. DHS will not take it; send a voided check or bank letter.
• A revalidation letter nobody opened. Under ON-015-26 the clock is 90 days from the assigned date, then termination.
• Credentials not refreshed annually. A license that lapses six months or more ends the enrollment and forces a new application.
• An old practice address. DHS asks for a DMS-673 before revalidation for exactly this reason; NPPES, CAQH and the carriers need the same address.
• A missing CCVS authorization. The insurer's 60-day physician clock pauses while the Medical Board's verification is outstanding.
• Assuming the Medicaid ID covers the PASSEs and ARHOME plans. It does not; each needs its own application.

So the work is front-loaded: we compare every field across the DHS application, NPPES, the license, CAQH and each plan's file before anything is submitted, then follow up with each payer weekly and log the representative's name, the date and the reference number.

Arkansas Medicaid, the PASSEs, the ARHOME carriers and Medicare all draw on one set of records: individual and group NPIs with current NPPES addresses, the IRS letter (SS-4 or 147C) with the legal name and tax ID, the Arkansas license with its dates, DEA if applicable, board certification if any, a malpractice certificate, a voided check or bank letter, ownership details for the DMS-675, practice locations, a current CAQH profile, the physician's CCVS authorization, and the Medicare approval letter once issued. Our full checklist and the secure way to send it are on what we need from you to start credentialing.

If the terms blur together, our page on what provider credentialing is separates credentialing, enrollment and contracting. The federal Medicaid rules every state follows are on Medicaid provider enrollment, and the other state guides are provider credentialing in Florida and provider credentialing in Kentucky.

ClaimCarePro enrolls providers with Arkansas Medicaid in the DHS provider portal, handles the 2026 revalidation, and credentials with the four PASSEs, the ARHOME carriers, Novitas Medicare and the commercial plans as one checked file, followed up weekly and logged. Flat pricing: $250 per payer application per provider, CAQH setup $250, re-credentialing $250, maintenance $99 per provider per year, or the new-practice bundle at $1,750 per provider ($1,400 each additional provider on the same group and payers). Start credentialing now for a secure start link within one business hour, or phone us at (844) 772-8902. Service details are on provider credentialing services, and ongoing upkeep on recredentialing.

Updated October 23, 2026. We read each Arkansas source listed here on October 23, 2026, except where a different date is shown. If an agency or plan changes what it publishes, its page governs over this article. Nothing here is legal advice.

• Arkansas DHS, Division of Medical Services, Provider Enrollment: humanservices.arkansas.gov (electronic-only initial applications; document lists; deposit slips refused; application fee and exemptions; five-year revalidation, 60 days early, annual credentials, six-month rule; top four denial reasons; contacts; portal lockout)
• Arkansas DHS, Become a Medicaid Provider: humanservices.arkansas.gov (apply, resume, status and fee links; phone menu; NPI reporting)
• Arkansas DHS, Practitioner Identification Number FAQ: humanservices.arkansas.gov (electronic PIN requests from July 15, 2025)
• Arkansas DHS, Required Documents Finder v.36: humanservices.arkansas.gov; provider types subject to the application fee: humanservices.arkansas.gov; DMS-675: humanservices.arkansas.gov; DMS-673: humanservices.arkansas.gov
• Arkansas DMS, Official Notice ON-015-26, Federal Revalidation Guidance from CMS (June 19, 2026): humanservices.arkansas.gov
• Arkansas DHS, PASSE Contact Us: humanservices.arkansas.gov
• Empower Healthcare Solutions, Provider Handbook, Version 1.01.2026: getempowerhealth.com
• Arkansas DHS, ARHOME Quarterly Report (March 16, 2026): humanservices.arkansas.gov
• Ark. Code 23-99-411, reproduced by FindLaw (marked current as of March 28, 2024): codes.findlaw.com
• Arkansas State Medical Board, About the Centralized Credentials Verification Service: arccvs.adh.arkansas.gov; Board home and license verification: armedicalboard.adh.arkansas.gov
• CMS, Award of A/B MAC Contract for Jurisdiction H (fact sheet, June 2026): cms.gov
• CMS-6096-N, Medicare, Medicaid, and CHIP provider enrollment application fee for CY 2026 (Federal Register, December 3, 2025): govinfo.gov
• CMS, Medicare Program Integrity Manual, chapter 10 (read October 23, 2026 for our Medicare enrollment page): cms.gov
• 42 CFR 424.521, eCFR (read October 23, 2026 for our Medicare enrollment page): ecfr.gov
• CAQH ProView Provider Quick Reference (read October 16, 2026 for our CAQH page): caqh.org

Not found, and therefore not stated: an Arkansas Medicaid enrollment processing time in days, the status values in DHS's scanned status job aid, the name of the company operating the Arkansas MMIS, a Novitas enrollment phone line (Novitas's site did not load for us), the official Lexis text of Ark. Code 23-99-411, and credentialing timelines from Arkansas Total Care, CareSource and Summit Community Care.