Share via

Sign-in failed Error code: interaction_required

Peng Jack 0 Reputation points
2026-05-18T08:13:49.84+00:00

Getting the below error when trying to login into Azure portal:

Sign-in failed

Error code: interaction_required

Error message: interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity. To learn more about tenant lifecycle policies, see https://aka.ms/TenantLifecycle Trace ID: <Pii removed> Correlation ID: 0<Pii removed> Timestamp: 2026-05-18 08:05:03Z @Sridevi Machavarapu

Microsoft Security | Microsoft Entra | Microsoft Entra ID

1 answer

Sort by: Most helpful
  1. Q&A Assist
    2026-05-18T08:14:01.5266667+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    The error interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity means the Microsoft Entra tenant is in an inactive, blocked state due to tenant lifecycle policies. While blocked, sign-in to Azure and Azure DevOps is prevented.

    Key points from the documented behavior:

    • A tenant that has been inactive for more than 200 days past the billing cycle can be blocked from login (AADSTS5000225).
    • After the login block is applied, there is a 20‑day grace period during which the tenant can still be reactivated.
    • If the tenant remains blocked for more than 20 days, it is permanently deleted and cannot be recovered.

    To proceed:

    1. Determine how long the tenant has been inactive.
      • If more than 20 days have passed since the block was applied, the tenant is permanently deleted and cannot be restored.
    2. If the tenant has been blocked for less than 20 days:
      • A tenant administrator must contact Microsoft support to request reactivation. Follow the guidance under “Tenant inaccessible due to inactivity” in the referenced Q&A articles.
    3. As a workaround for access issues while dealing with the blocked tenant:
      • Sign in directly with the tenant in the Azure portal URL, for example:
        • https://portal.azure.com/<TenantId> or
        • https://portal.azure.com/<yourTenantName>.onmicrosoft.com
      • If the original tenant cannot be recovered, create a new tenant from the Entra admin center (https://entra.microsoft.com/ → Entra ID → Overview → Manage tenants → Create new tenant) and then use that new tenant domain or ID in the Azure portal URL.

    If the tenant is within the 20‑day reactivation window, resolution ultimately requires working with Microsoft support as tenant admin; self-service alone cannot remove the AADSTS5000225 block.


    References:

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.