Colorado Medicaid Provider Enrollment: Health First Colorado, the Provider Web Portal, RAEs, Novitas Medicare and Commercial Credentialing

Every row below is a separate file. The middle column is the standard each agency, contractor or law publishes, quoted from the linked source, and none of them starts until the application is complete.

Most Colorado delays start before the first panel is filled in, because HCPF says the enrollment type and provider type "cannot be changed once an application has been started"; the wrong choice means a new application. The Colorado interChange Provider Enrollment Manual (revised October 8, 2026) defines the types:

Three Colorado-specific rules decide which boxes you check:

• A one-physician practice with an EIN is still a group. The manual's example: the business enrolls as a Group (an MD- or DO-led clinic is Provider Type 16, Clinic Practitioner Group), and once that is approved the physician files an IWG application and affiliates to it. HCPF's best-practice page sends practices led by an advanced practice nurse, psychologist, licensed behavioral health clinician, therapist or CRNA to Provider Type 25, Non-Physician Practitioner Group, instead.
• One Medicaid ID per SSN. HCPF says an individual may hold only one Billing Individual, IWG or OPR enrollment, even across several locations; a second application with the same SSN and NPI can be denied as a duplicate. The same person can still affiliate with multiple groups.
• One NPI per location for organizations. House Bill 18-1282 (10 CCR 2505-10 8.126) requires organizations, not individuals, to use a separate NPI for each service location and provider type enrolled, so a group with three offices files three applications with three Type 2 NPIs (HCPF individual v. organizational provider types).

OPR has its own wrinkles. The Affordable Care Act requires a practitioner who orders, prescribes or refers for Health First Colorado members to be enrolled even if they never bill, and the claim for the ordered service will not pay without the enrolled OPR's NPI on it. A practitioner already enrolled as an IWG does not file a separate OPR application. HCPF lets physicians (provider type 05) and osteopaths (26) holding only a training license enroll as OPR with taxonomy 390200000X; billing and IWG enrollments need a full license.

The Provider Web Portal walks the applicant through panels in a fixed order. The manual lists them, and the ones that cause the most returns are below.

1. Request Information. Enrollment type, provider type, NPI, taxonomy and the requested effective date. This is where a backdate is requested (see below).
2. Specialties and Addresses. The service address is what appears in Health First Colorado's Find a Doctor search, and its email receives newsletters and bulletins. Each organizational service address needs its own application and NPI.
3. Provider Identification. License number with its effective date (not the issue date) and expiration date, plus Medicare, CLIA and DEA numbers where they apply. Every license listed needs a matching attachment, and the data typed in must match the copy attached.
4. Network Participation. Lists networks you already belong to. The manual is explicit that adding one here "does not create an enrollment into that network."
5. EFT Enrollment. Electronic funds transfer is required for payment.
6. Disclosures. Every person or entity with 5% or more ownership or control, and a board of directors entered at 0%, with name, address, SSN or EIN, and date of birth for individuals.
7. Attachments and Fees. Upload each document separately and label it; HCPF says reviewers may overlook combined files, and attaching documents your provider type does not need can itself get the application returned.
8. Agreement and Summary. Read and accept each Provider Participation Agreement, type the provider's name as the electronic signature, then press Confirm on the Summary panel. The application is not submitted until Confirm is clicked.

Write down the ATN and the password. HCPF's best-practice page says a forgotten application password and security answers cannot be reset; the only fix is to start a new application.

Colorado dates its documents more strictly than many states, and the manual spells out what passes:

• W-9 signed and dated within the last six months. Required for Group, Facility and Billing Individual enrollments (and Atypical, with EIN or SSN as applicable); not required for IWG or OPR. HCPF lists an incorrect W-9 tax classification among the common reasons applications come back.
• A voided check or bank letter dated within six months. The check must be pre-printed, not handwritten or temporary, and the name, routing number and account number must match the EFT panel. A bank letter must be on the bank's letterhead and signed by a bank representative. Deposit slips are not accepted.
• The license, entered exactly. HCPF asks for the full DORA license number including letters, dots and dashes. Typing license data into the Board Certifications panel instead of the license field gets the application returned, and if a license expires within two weeks of submission, attach both the current and the renewed license.
• Real dates of birth. Under 42 CFR 455.104 and 10 CCR 2505-10 8.125.15, Colorado verifies the date of birth for every individual, owner and managing employee; a mismatch sends the application back or gets it denied.
• IRS documentation for groups. HCPF encourages groups, facilities and atypical providers to attach an IRS document showing the legal name and tax ID so screening can be resolved faster.

The same documents feed every other file in this guide, which is why we collect them once. Our checklist is on what we need from you to start credentialing.

Check status from the Enrollment Status link on the portal's enrollment page with the ATN and the Tax ID entered on the application (enrollment manual, Enrollment Status). HCPF's next steps page describes what follows submission: the fiscal agent reviews the file, some applications need a site visit or Department approval, and the result is either approval or a return for changes or missing documents, each announced by email to the contact person on the application.

A detail that costs practices days: comments can show on the status screen before the application is actually unlocked. The manual says you cannot open it to correct anything until the status reads one of three values: Returned to provider for Additional Information, Returned to provider for Additional Authorization(s) or Returned to provider for Missing Documentation. Then Resume Enrollment (ATN, the exact Tax ID, and the password) reopens it.

Approval is not the last step. The approval email tells you to register the new provider ID in the Provider Web Portal, and HCPF points new providers to Beginning Billing training and the billing manuals. Practices that submit through a clearinghouse have a dated item right now: HCPF's provider contacts page asks providers to have their trading partners register and enroll in the new Trading Partner Enrollment and Testing Site by October 30, 2026.

For general enrollment help, the Provider Services Call Center is 1-833-468-0362, 8:00 a.m. to 5:00 p.m. Mountain, Monday through Friday. Gainwell's mailing address for the fiscal agent is P.O. Box 30, Denver, CO 80201.

Colorado lets a new applicant ask for an enrollment effective date up to ten months before the current date. HCPF's backdating quick guide says the Requesting Enrollment Effective Date field defaults to today; you overwrite it with the earlier date on the Request Information panel. When you resume an application that is still in process, the date saved earlier must still fall inside that ten-month window when you submit, so a slow application can lose part of its backdate.

For a provider already enrolled and approved, the route is the Backdate Enrollment Form from HCPF's Provider Forms page, uploaded as an attachment. If the request is approved, the backdated contract effective date appears on the Welcome Letter, which is the document to keep with any claims you plan to submit for that earlier period.

HCPF screens every enrolling provider under 10 CCR 2505-10 8.100 and the federal rules in 42 CFR 455 Subpart E. The level of screening follows the provider type's categorical risk:

• Site visits. The manual says pre-enrollment site visits are required for moderate- and high-risk provider types under 42 CFR 455.432, and a provider who refuses one may be excluded from Health First Colorado. HCPF notes that site visits for high-risk providers are recorded.
• Fingerprints. High-risk provider types and anyone with 5% or more ownership or control interest in them must submit fingerprints within 30 calendar days of a request. HCPF's list of high-risk types includes enrolling DME suppliers, home health agencies, hospices, skilled nursing facilities, personal care agencies, doulas and lactation providers, several home and community-based services, and non-emergent medical transportation. Physician practices are not on that list unless a trigger applies, such as an exclusion or for-cause termination in the previous 10 years, a delinquent debt to the state, or a fraud-based payment suspension.
• Application fee. For calendar year 2026, HCPF lists the institutional provider fee at $750, adjusted from $730 in 2025, applying to new enrollments, revalidations and new locations (Federal Register notice).

Colorado requires revalidation at least every five years on a rolling schedule keyed to the date the enrollment was approved, according to HCPF's revalidation page. HCPF emails each provider about six months before the deadline, and its Provider Revalidation Dates Spreadsheet (updated October 19, 2026) lists every due date. Locations approved on different dates revalidate on different dates, with separate notices.

Two warnings on that page are worth taking literally. Claims for providers who have not revalidated by the due date "are being denied," and they can be resubmitted only after revalidation succeeds. And starting a brand-new application instead of waiting for the notice "will create duplicate enrollments and cause claim processing issues." The manual adds that the revalidation link stays available for six months after the due date; past that, a disenrolled provider uses Reenrollment.

Before revalidating, HCPF suggests confirming each Health First Colorado NPI is also enrolled with Medicare (for providers who bill Medicare), obtaining any new location NPI first, and removing Provider Web Portal access for delegates who have left the group.

HCPF calls the Accountable Care Collaborative (ACC) the primary delivery system for Health First Colorado, and its Phase III contracts began July 1, 2025. HCPF's ACC Phase III page says the RAEs administer the capitated behavioral health benefit, build provider networks and coordinate care in their regions, while two physical health managed care plans cover certain areas. The organizations HCPF lists:

For a behavioral health practice this is the step that decides whether it gets paid: because the RAEs administer the capitated behavioral health benefit, a Health First Colorado ID alone does not make a therapist a participating provider for services under that benefit. Enroll with the state first (HCPF requires it of providers serving members through the RAEs, MCOs and CHP+), then apply to the RAE for each region you serve. None of the HCPF pages we read publish a RAE credentialing timeline, so ask each organization for its current process and log the answer.

Colorado's Part A and Part B contractor is Novitas Solutions, the MAC for Jurisdiction H, which also covers Arkansas, Louisiana, Mississippi, New Mexico, Oklahoma and Texas, plus Indian Health and Veterans Affairs facilities. Physicians and practitioners apply in PECOS on the CMS-855I, groups on the CMS-855B, and Novitas issues the PTAN. Our Medicare provider enrollment page covers which form fits which situation, and PECOS explained covers the portal.

Novitas's telephone page (last modified June 8, 2026) lists provider enrollment at 855-252-8782, option 3, and fax 877-439-5479, Monday to Friday 8 a.m. to 4 p.m. Central and Mountain. The same page says that line "should not be used for checking the status of an application"; status goes through the Provider Enrollment Status Inquiry Tool or the credentialing specialist on your acknowledgement or development letter.

Processing time comes from CMS, not Novitas. The Program Integrity Manual, chapter 10 holds every MAC to these standards:

Under 42 CFR 424.521, physicians and non-physician practitioners can bill Medicare retrospectively for up to 30 days before their effective date (90 days after a Presidentially declared disaster) when circumstances prevented earlier enrollment. Compare that with Health First Colorado's ten-month backdate request: the two programs are nothing alike, so plan start dates around the Medicare window.

Part B claims for Railroad Retirement Board beneficiaries go to Palmetto GBA, not Novitas. Palmetto's Railroad Medicare enrollment page (published January 13, 2026) says the provider must hold a Novitas Part B enrollment first and then requests a Railroad PTAN with Palmetto's PTAN Lookup and Request Tool; there is no second CMS-855. Palmetto gives the Railroad PTAN the Part B effective date, asks you to allow up to 30 days, and handles electronic claim enrollment separately. Request it as soon as the Novitas approval letter arrives; otherwise the gap tends to surface months later as a rejected claim for a railroad retiree.

Colorado put a deadline on insurers for physicians. Senate Bill 21-126, "Timely Credentialing of Physicians by Insurers," was signed July 6, 2021 and took effect September 7, 2021, adding C.R.S. 10-16-705.7. As summarized from the compiled statute and the bill record:

• The carrier sends a written or electronic receipt within 7 calendar days of getting the application.
• If it is incomplete, the carrier says so within 10 calendar days and lists what is missing.
• Credentialing must conclude within 60 calendar days of a completed application, with notice of the outcome within 10 calendar days after that.
• If the carrier misses the 7-day receipt on a completed application, the physician is treated as a participating physician effective no later than 53 calendar days after the carrier received it.
• Carriers must post their credentialing policies, application requirements, a checklist and a contact on their websites, and may not demand a new application or contracting process to recredential.
• Physicians must report changes to name, address, phone, business structure or tax ID within 15 business days.

The statute is written for physicians; other practitioner types should ask each carrier which timeline it applies to them. In practice the 60 days runs on a complete file, and for most carriers that file is the CAQH profile, which CAQH asks providers to re-attest every 120 days (CAQH quick reference). See CAQH explained for the profile and the payer-by-payer credentialing hub for each national plan.

In our experience the files that stall do so because of the provider's own data, and HCPF's list of common return reasons on its enrollment best practices page reads the same way. What we check before anything is submitted:

• License fields. Missing license dates or numbers, a number typed without its letters and punctuation, or license data put in the board certification panel.
• The W-9. Wrong tax classification, or a form signed more than six months before submission.
• Banking. A handwritten or temporary check, a bank letter without a signature, or a routing or account number that differs from the EFT panel by one digit.
• Dates of birth. Any owner or managing employee whose DOB does not verify sends the file back.
• The wrong enrollment type. A solo physician with an EIN who files only an individual application, or a second individual enrollment under the same SSN.
• Mismatched addresses and NPIs. A service address or taxonomy that differs from NPPES, Medicare and CAQH, or several locations sharing one organizational NPI.
• Missed revalidation. The notice went to a former office manager's email and claims started denying on the due date.
• An expired CAQH attestation, which stops every commercial carrier reading the profile.

Our process is one file, compared field by field across the application, NPPES, the license record, Medicare and CAQH before submission, then weekly follow-up with every payer with the rep's name, the date and the reference number logged.

The federal rules that apply to Medicaid in every state, and how state enrollment differs from managed care credentialing, are on our Medicaid provider enrollment hub. The same kind of state guide exists for Florida and Kentucky. If the difference between credentialing, enrollment and contracting is the confusing part, start with what provider credentialing is.

We handle Colorado as one file: Health First Colorado enrollment in the Provider Web Portal, the RAE and managed care applications, Novitas Medicare and the Railroad PTAN, CAQH, and the commercial carriers, with weekly payer follow-up logged. Flat pricing: $250 per payer application per provider, CAQH setup $250, re-credentialing $250, maintenance $99 per provider per year, or the new-practice bundle at $1,750 per provider ($1,400 each additional provider on the same group and payers). Start credentialing now for a secure start link within one business hour, or call (844) 772-8902. Details are on our provider credentialing services page, and revalidation and upkeep are covered on recredentialing.

Updated October 23, 2026. Every source was read on October 23, 2026 unless noted. If an agency, contractor or plan changes its published standard, the linked source controls. Statutory summaries are not legal advice.

• HCPF, Provider Enrollment: hcpf.colorado.gov (eight-business-day average; maintenance screening up to 45 days; $750 CY2026 fee; ten-month backdate; DOB verification; HB 18-1282; OPR rules; fingerprinting and high-risk list)
• HCPF, Colorado interChange Provider Enrollment Manual (revised October 8, 2026): hcpf.colorado.gov (enrollment types; W-9 and EFT rules; disclosures; Network Participation; Enrollment Status with ATN and Tax ID; returned statuses; Provider Participation Agreement; site visits; revalidation and reenrollment windows)
• HCPF, Revalidation (Provider Revalidation Dates Spreadsheet updated October 19, 2026): hcpf.colorado.gov
• HCPF, Next Steps after Enrollment Application: hcpf.colorado.gov
• HCPF, Enrollment Best Practices: hcpf.colorado.gov (common return reasons; Provider Types 16 and 25; one enrollment per individual)
• HCPF, Backdating a New Enrollment Application (last updated August 22, 2024): hcpf.colorado.gov
• HCPF, Provider Contacts: hcpf.colorado.gov (Provider Services Call Center 1-833-468-0362; Gainwell fiscal agent address; trading partner deadline October 30, 2026)
• HCPF, Accountable Care Collaborative Phase III: hcpf.colorado.gov (four RAEs and Elevate Medicaid Choice from July 1, 2025)
• HCPF, Individual v. Organizational Provider Types (October 23, 2025): hcpf.colorado.gov
• Health First Colorado Provider Web Portal (Gainwell Technologies): coxix.gainwelltechnologies.com
• Federal Register, provider enrollment application fee for CY2026 (December 3, 2025): federalregister.gov
• 42 CFR Part 455, Subpart E, eCFR: ecfr.gov
• Colorado General Assembly, SB21-126 Timely Credentialing of Physicians by Insurers (signed July 6, 2021; effective September 7, 2021): leg.colorado.gov
• C.R.S. 10-16-705.7, compiled text of the 2024 Colorado Revised Statutes (unofficial compilation): colorado.public.law
• Novitas Solutions, JH Contact us by telephone (last modified June 8, 2026): novitas-solutions.com
• CMS, Medicare Program Integrity Manual, chapter 10 (read October 23, 2026 for our Medicare enrollment page): cms.gov
• 42 CFR 424.521, eCFR (read October 23, 2026 for our Medicare enrollment page): ecfr.gov
• Palmetto GBA, Enroll in Railroad Medicare (published January 13, 2026; read October 23, 2026 for our Medicare enrollment page): palmettogba.com
• CAQH ProView Provider Quick Reference (read October 16, 2026 for our CAQH page): caqh.org

Not found, and therefore not stated: a published credentialing timeline from any Colorado RAE, RMHP Prime or Elevate Medicaid Choice; the current official text of Colorado's uniform credentials application rule; Colorado Medical Board licensing pages (they refused our reader); and Novitas-specific processing figures beyond the CMS standard.