A cloud-based identity and access management service for securing user authentication and resource access
The error AADSTS5000225: This tenant has been blocked due to inactivity means the Azure/Microsoft Entra tenant for the new account has been marked inactive and access is blocked.
Key points from the tenant lifecycle behavior:
- When a tenant is made inaccessible due to inactivity, all sign-ins to that tenant start failing with this exact error.
- Administrators have a limited window (20 days from when the tenant became inactive) to request reactivation.
- After 20 days in this inactive state, the tenant is deleted and cannot be recovered.
To proceed, depending on the role and goal for this tenant:
- If acting as the tenant administrator and the tenant is within the 20‑day window:
- Contact Microsoft support to request tenant reactivation. Use the global support phone numbers listed at global support phone numbers.
- Do not open multiple support cases for the same issue; wait for a decision on the first case.
- If the tenant is not reactivated:
- After 20 days of being inaccessible due to inactivity, the tenant is automatically deleted and is not recoverable.
- Review Microsoft’s data protection policies at data management.
- As an application owner/developer targeting this tenant:
- Minimize authentication requests to this deactivated tenant until it is reactivated.
- Do not submit multiple assistance requests; wait to be contacted once a decision is made.
- Review the same data protection policies if needed.
Additionally, a similar scenario for a new Azure account shows these practical steps while waiting for or in case of reactivation issues:
- Try signing in directly to the tenant in Azure portal using the tenant identifier or tenant name in the URL, for example:
-
https://portal.azure.com/<TenantId> -
https://portal.azure.com/<yourTenantName>.onmicrosoft.com
-
- If access is permanently blocked and a new tenant is required:
- Sign in to https://entra.microsoft.com/.
- Go to Entra ID → Overview → Manage tenants and create a new tenant.
- Note the new tenant’s domain name.
- Then sign in to Azure portal using the new tenant domain in the URL, for example:
https://portal.azure.com/xxx.onmicrosoft.com.
If the blocked tenant is still within the 20‑day window and must be used, the only supported path is to have the tenant administrator contact Microsoft to request reactivation.
References: