Sign-in failed Error code: AADSTS5000224

Nemanja Pantelic 20 Reputation points
2025-03-20T11:54:00.4+00:00

Hi Team,

I found the thread - https://learn.microsoft.com/en-us/answers/questions/2034660/i-cannot-log-in-to-my-cdx-tenant-aadsts5000224-we

 

I’m facing the same behavior with my CDX tenant - M365Xxxxxxxxxxx.onmicrosoft.com

 

Error message:

Sign-in failed

Error code: AADSTS5000224

Error message: AADSTS5000224: We are sorry, this resource is not available. If you are seeing this message by mistake, please contact Microsoft support. Trace ID: xxxxxxxx-3b28-4b92-8807-xxxxxxxxxCorrelation ID: acb791b8-xxxxx-4e91-9d65-xxxxxxxxxTimestamp: 2025-03-19 12:18:08Z

I have 2 Aure subscriptions here and as a Microsoft Partner, we’re using these resources all the time so I’d really appreciate your help with the issue.

 

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
24,204 questions
{count} votes

Accepted answer
  1. Raja Pothuraju 20,800 Reputation points Microsoft External Staff
    2025-03-21T16:36:07.5666667+00:00

    Hello @Nemanja Pantelic,

    Thank you for sharing required details over email.

    The issue you were facing occurred because your tenant was identified as one of the CDX tenant which caused it to be blocked. To resolve this, we reached out to the Product Group team internally. They have since unblocked/re-authenticated your tenant, and please check and confirm, if you are able to access it successfully or not.

    Microsoft uses a combination of insights based on the properties of a tenant to determine if the tenant belongs to Microsoft or not. As part of our security hardening practices, we routinely disable tenants to comply with internal lifecycle policy.  Since this tenant was incorrectly identified as belonging to Microsoft, it was disabled as part of Microsoft's internal lifecycle policy. Since this issue was identified, we have improved our tenant identification checks and have added new verification to our logic. We apologize for any inconvenience caused.

    You can now log back into your old tenant, remove the custom domain from it, and then verify the domain in your new directory. Let me know if you need any assistance!

    I hope this information is helpful. Please feel free to reach out if you have any further questions.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
  1. Techhelp Volunteer 225 Reputation points
    2025-03-20T16:51:54.9433333+00:00

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.