The error TenantAccessBlockedException / TenantAccessBlockedError with HTTP status 500 indicates that access to the Microsoft 365 tenant is blocked at the service level. This is a tenant-side issue, not a client configuration problem on the device.
Because tenant access is blocked, sign-in and data access for Outlook and Teams will fail until the block is removed by Microsoft 365 service or by tenant administration through a support case.
Action steps:
- Contact the Microsoft 365 tenant administrator
- The admin must sign in to the Microsoft 365 Admin Center and check the tenant health and service status.
- If the admin also cannot access services, they should use the Admin Center support entry points or phone support to open a service request with Microsoft.
- Open a support ticket from the tenant
- The admin should open a support ticket in the M365 Admin Portal describing that users receive
TenantAccessBlockedExceptionwhen accessing Outlook on the web and cannot sign in to Teams. - Include time of occurrence, affected users, and any correlation IDs from the error details.
- The admin should open a support ticket in the M365 Admin Portal describing that users receive
- If sign-in issues to desktop apps also appear
- For broader sign-in failures to Microsoft 365 desktop apps, the admin should follow the guidance under “Can’t sign in to Microsoft 365 desktop applications” and related authentication troubleshooting, and may be asked by Microsoft Support to collect MSOAID logs as described in Use MSOAID for authentication issues.
- Do not attempt client-only fixes
- Local repairs (reinstalling Outlook/Teams, clearing caches, etc.) will not resolve a tenant-level block. Resolution requires Microsoft 365 service-side or billing/compliance remediation coordinated by the tenant admin and Microsoft Support.
Until the tenant block is cleared, Outlook on the web, new Outlook for Windows, and Teams sign-in will continue to fail with tenant access errors.
References: