Share via

Error code: interaction_required

Kenneth van Wyk 0 Reputation points
2026-03-15T18:20:20.5233333+00:00

Error message: interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity. To learn more about tenant lifecycle policies, see https://aka.ms/TenantLifecycle Trace ID: 9c1f2b5a-229e-4386-bda1-8b53118f0d00 Correlation ID: 019cf295-748e-7f5f-81d5-40d71ec3eaaf Timestamp: 2026-03-15 17:40:07Z

Microsoft Security | Microsoft Entra | Microsoft Entra ID

1 answer

Sort by: Most helpful
Most helpful Newest Oldest

  1. AI answer

    2026-03-15T18:20:35.4666667+00:00

    The error interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity means the Microsoft Entra tenant is in an inaccessible state due to inactivity and sign-ins are being blocked.

    Key points from the error and behavior:

    • interaction_required is a server-originated code indicating that user interaction is required to complete the request, but in this case the underlying cause is tenant blocking.
    • AADSTS5000225 specifically indicates the tenant has been blocked due to inactivity.
    • When a tenant is blocked for inactivity, sign-in to Azure, Azure DevOps, and other dependent services fails with this error.

    Tenant lifecycle and timing:

    • When a tenant becomes inactive, Microsoft can block it to reduce unnecessary costs.
    • Administrators can request reactivation within 20 days of the tenant entering the inactive/blocked state.
    • If the tenant remains inaccessible for more than 20 days, it is deleted and cannot be recovered.

    Actions depend on the role and goal:

    1. If the goal is to reactivate and keep using the tenant
      • A tenant administrator must contact Microsoft support within the 20‑day window after the tenant was blocked.
      • Use the documented global support phone numbers to open a support case and request tenant reactivation.
      • Do not submit multiple assistance requests for the same issue; wait for the decision on the existing case.
    2. If the tenant is not needed anymore
      • Do nothing; after 20 days in the inaccessible state, the tenant is automatically deleted and is not recoverable.
      • Review Microsoft’s data protection policies to understand how data is handled after deletion.
    3. For application owners/developers hitting this error
      • Minimize authentication requests to this blocked tenant until it is reactivated.
      • Do not open multiple support requests; wait for the outcome of the existing case.
      • Review the same data protection policies if the tenant will not be reactivated.

    If the tenant has already been blocked for more than 20 days, the only option is to work with or create a different tenant, because the original one will be (or has been) deleted and cannot be restored.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.