A fully managed end-to-end service for digitally signing code, documents, and applications. (formerly Trusted Signing)
The error AADSTS5000225: This tenant has been blocked due to inactivity indicates that the Microsoft Entra/Azure tenant is in an inactive state and has been blocked.
A service request cannot be opened on behalf of the user, but the following actions are required to reactivate the tenant:
- Confirm the tenant is within the 20‑day reactivation window
- Tenants that are inaccessible due to inactivity can be reactivated only within 20 days of entering the inactive state.
- After 20 days, the tenant is deleted and is not recoverable.
- Have a tenant administrator contact Microsoft support
- A tenant administrator must contact Microsoft directly using the global support phone numbers: see the "global support phone numbers" link in the documentation.
- Only Microsoft support can process the reactivation request.
- Do not submit multiple assistance requests for the same tenant; wait for a decision on the existing case.
- If reactivation is not needed or not possible
- If the tenant is not reactivated within 20 days, it is deleted and cannot be restored.
- Review Microsoft’s data protection policies if the tenant will remain deleted.
Additional practical steps from similar cases:
- Try signing in directly to the tenant in Azure Portal using its tenant ID or tenant name in the URL, for example:
-
https://portal.azure.com/<TenantId> -
https://portal.azure.com/<yourTenantName>.onmicrosoft.com
-
- If browser/session issues are suspected, sign out of all Microsoft accounts, clear browser site data, and try again, or use a private/incognito window.
- If the original tenant cannot be recovered and access to Azure is still required, create a new tenant from the Microsoft Entra admin center (https://entra.microsoft.com/) and then access it via
https://portal.azure.com/<newTenantName>.onmicrosoft.com. From there, a support ticket can be opened if the subscription/support level allows.
Only a tenant administrator working directly with Microsoft support can complete the reactivation; no automated or self-service portal action will bypass the inactivity block.
References: