Share via

Sign-in failed Error code: interaction_required Error message: interaction_required: AADSTS5000225 for new Azure user

Risa96 0 Reputation points
2026-03-03T23:15:37.6+00:00

I created new account in Azure and got below error while logging:

Sign-in failed

Error code: interaction_required

Error message: interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity. To learn more about tenant lifecycle policies, see https://aka.ms/TenantLifecycle Trace ID: dfa32c1e-76e0-4165-99b6-c9bd0de84e00 Correlation ID: 019cb5f6-115a-76b0-afc2-00364f80037f Timestamp: 2026-03-03 23:08:48Z

Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes

1 answer

Sort by: Most helpful
  1. Q&A Assist
    2026-03-03T23:15:51.3033333+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    The error AADSTS5000225: This tenant has been blocked due to inactivity means the Azure/Microsoft Entra tenant for the new account has been marked inactive and access is blocked.

    Key points from the tenant lifecycle behavior:

    • When a tenant is made inaccessible due to inactivity, all sign-ins to that tenant start failing with this exact error.
    • Administrators have a limited window (20 days from when the tenant became inactive) to request reactivation.
    • After 20 days in this inactive state, the tenant is deleted and cannot be recovered.

    To proceed, depending on the role and goal for this tenant:

    1. If acting as the tenant administrator and the tenant is within the 20‑day window:
      • Contact Microsoft support to request tenant reactivation. Use the global support phone numbers listed at global support phone numbers.
      • Do not open multiple support cases for the same issue; wait for a decision on the first case.
    2. If the tenant is not reactivated:
      • After 20 days of being inaccessible due to inactivity, the tenant is automatically deleted and is not recoverable.
      • Review Microsoft’s data protection policies at data management.
    3. As an application owner/developer targeting this tenant:
      • Minimize authentication requests to this deactivated tenant until it is reactivated.
      • Do not submit multiple assistance requests; wait to be contacted once a decision is made.
      • Review the same data protection policies if needed.

    Additionally, a similar scenario for a new Azure account shows these practical steps while waiting for or in case of reactivation issues:

    • Try signing in directly to the tenant in Azure portal using the tenant identifier or tenant name in the URL, for example:
      • https://portal.azure.com/<TenantId>
      • https://portal.azure.com/<yourTenantName>.onmicrosoft.com
    • If access is permanently blocked and a new tenant is required:
      • Sign in to https://entra.microsoft.com/.
      • Go to Entra ID → Overview → Manage tenants and create a new tenant.
      • Note the new tenant’s domain name.
      • Then sign in to Azure portal using the new tenant domain in the URL, for example: https://portal.azure.com/xxx.onmicrosoft.com.

    If the blocked tenant is still within the 20‑day window and must be used, the only supported path is to have the tenant administrator contact Microsoft to request reactivation.


    References:


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.