What Is Authorization in Medical Billing? A Clear Guide for Practice Staff

Authorization in medical billing is the process by which an insurance payer confirms a service is covered, medically necessary, and approved for reimbursement. The category includes prior authorization, pre-certification, concurrent review, retroactive authorization, and step therapy authorization, each with different rules and different roles in claim adjudication. This guide defines each type, explains when each applies, and shows how authorization ties to the claim cycle.

Authorization in medical billing is the process by which an insurance payer confirms that a specific healthcare service is covered, medically necessary, and will be reimbursed when delivered. The category includes several specific authorization types, each with different rules and different roles in the claim adjudication process.

For billing staff, registrars, and coordinators new to authorization workflows, the terminology can be confusing. Prior authorization, pre-certification, pre-authorization, concurrent review, retroactive authorization: these terms get used interchangeably, but they mean different things in different contexts.

This guide defines each authorization type, explains when each applies, and shows how authorization ties to claim adjudication. It is written for billing staff and practice managers who want a clear reference without insider jargon.

What is authorization in medical billing?

Authorization is the payer's confirmation that a service is covered, medically necessary, and approved for reimbursement. The term is used broadly to cover several specific approval mechanisms, all of which serve the same purpose: getting payer agreement before the service is delivered (or in some cases, after) so the claim will be paid.

Authorization is distinct from eligibility verification. Eligibility confirms the patient has active coverage. Authorization confirms the specific service is covered and approved. A patient can be eligible for benefits and still need authorization for a specific procedure.

Authorization is also distinct from referral. A referral is a clinical recommendation from one provider (typically a PCP) to another (typically a specialist). Some payer plans require both a referral and authorization. Some require only one. Some require neither for certain services.

What are the main types of authorization in medical billing?

Six specific authorization types apply across most payer plans. A quick comparison before the detailed breakdown.

Prior authorization (PA)

The most common form. Prior authorization is the payer's review and approval of a specific service before it is delivered. The provider submits a request including clinical documentation supporting medical necessity. The payer reviews and approves, denies, or requests additional information.

PA applies to a wide range of services depending on payer policy: advanced imaging (MRI, CT, PET), specialty drugs, certain surgeries, durable medical equipment, and high-cost interventions. Specific procedure categories like advanced imaging have their own typical workflows.

PA is the workflow that drives most coordinator labor in PA-heavy specialties. Mid-sized specialty practices typically process 50 to 300 PA requests per week.

Pre-certification

Often used interchangeably with prior authorization, but technically a slightly different concept. Pre-certification typically refers to confirmation that a hospital admission, surgery, or other significant procedure will be covered. Some payers distinguish pre-certification (administrative approval) from prior authorization (medical necessity review).

The distinction is operationally minor for most practices. The submission workflow is largely the same.

Pre-authorization

A general term sometimes used as a synonym for prior authorization or pre-certification. In some payer documentation, pre-authorization is the broader term encompassing both prior authorization and pre-certification. The terminology varies by payer.

For practice operations, the relevant question is “what does this specific payer require for this specific service?” not “what is the technically correct term?”

Concurrent review

Authorization that happens while the patient is receiving care, most commonly during inpatient hospitalization. The payer reviews the case on an ongoing basis to confirm continued medical necessity for additional days of inpatient care or continued treatment.

Concurrent review is most relevant for hospitals and inpatient care settings. Outpatient practices encounter it less frequently.

Retroactive authorization (retro auth)

Authorization obtained after the service has been delivered. Some payers allow retro auth in defined emergency or urgent care scenarios. Most do not allow retro auth for routine services where prior authorization should have been obtained beforehand.

Retro auth is operationally unreliable as a workflow shortcut. Practices that fail to obtain prior authorization and rely on retro auth typically absorb significant losses on denied claims.

Step therapy authorization

Authorization that requires the patient to first try (and fail) less expensive alternatives before a more expensive treatment is approved. Common for specialty drugs and certain medications. The submission must document the patient's history with step therapy alternatives.

How does authorization tie to claim adjudication?

The claim adjudication chain runs in a specific sequence.

1. Service delivered. Provider renders the service with appropriate documentation.
2. Claim submitted. Practice submits a claim including CPT codes, ICD-10 codes, and authorization number (if applicable).
3. Payer adjudication. Payer's claims system processes the claim, checking eligibility, authorization, coding, and medical necessity.
4. Decision. Payer pays the claim, denies it, or pends it for additional information.

Authorization affects step 3 in specific ways. A claim for a service that required authorization but doesn't reference a valid authorization number will deny. A claim for a service authorized for a different date of service may deny. A claim for a service authorized at the wrong CPT will deny.

The integration point that fails most often is the authorization-to-claim linkage. The authorization may have been obtained but not documented correctly in the practice's billing system. The claim goes out without the auth number. The denial comes back. The coordinator chases the auth number, refiles, and waits another 30 days for adjudication.

What is the difference between authorization and pre-authorization?

In most contexts, these terms are used interchangeably. “Pre-authorization” emphasizes the timing (before service delivery), and “authorization” is used as a broader umbrella term covering pre-, concurrent, and retroactive approvals.

The practical implication for billing staff is to focus on what the specific payer requires for the specific service, not on the terminology. Payer policy is what controls.

How is authorization workflow changing in 2026?

Three changes are reshaping authorization workflow.

1. CMS-0057-F final rule. The CMS Interoperability and Prior Authorization Final Rule imposes new obligations on impacted payers starting in 2026: faster decision timeframes, specific denial reason codes, public reporting, and FHIR-based APIs by 2027.

2. State-level reforms. Many states have enacted PA reform legislation creating faster turnaround requirements, gold carding provisions, and other reforms that affect authorization workflow.

3. Automation maturity. PA automation platforms have matured to the point where most routine authorizations can be submitted electronically with minimal manual coordinator time. The workflow that took 25 to 35 minutes per submission five years ago can now run in 5 to 10 minutes for many use cases.

For billing staff, the practical implications are: faster payer decisions (good), more documentation requirements (challenging), and more reliance on technology platforms for routine submission (changes the role from manual portal entry to exception handling).

Our prior authorization solution handles the routine submission and status tracking this shift is pushing toward automation.

What documentation does authorization typically require?

The documentation requirements vary by payer and procedure, but the common elements:

• Patient demographic information. Name, DOB, insurance ID, contact info.
• Provider information. Rendering provider NPI, taxonomy, contact info.
• Service codes. CPT, HCPCS, ICD-10 diagnosis codes.
• Clinical documentation. Notes, imaging results, lab values, prior treatment history supporting medical necessity.
• Step therapy documentation. Records of less expensive alternatives tried and failed, where applicable.
• Site of service. Where the service will be delivered (outpatient, inpatient, ASC, home).
• Urgency level. Standard or expedited request.

Missing documentation is the most common cause of authorization delays and denials. Documentation discipline at submission saves significant downstream labor.

Where authorization automation fits (and where it doesn't)

Best fit:

• Practices processing more than 50 authorizations per week
• Multi-payer practices with high rule complexity
• Specialty practices on MA-heavy or Medicaid-heavy panels
• Organizations with chronic coordinator vacancy

Less ideal fit:

• Practices with low authorization volume (under 25 per week)
• Practices on commercial PPO panels with minimal authorization requirements
• Organizations without basic EHR integration capability

Frequently asked questions