State Medicaid directors are told to develop strategies to ensure that providers are legitimate. Noncompliant states could face audits.