A cloud-based identity and access management service for securing user authentication and resource access
The error AADSTS5000225 indicates that the Microsoft Entra tenant is blocked due to inactivity.
Based on the documented behavior, when a tenant is marked inactive, sign-in attempts fail with this error. Administrators have up to 20 days from when the tenant becomes inaccessible to request reactivation. After 20 days in this state, the tenant is permanently deleted and cannot be recovered.
To proceed:
- Determine whether the tenant has been inactive (blocked) for less than 20 days. If it has been longer than 20 days, the tenant is deleted and cannot be restored.
- If within 20 days, the tenant administrator must contact Microsoft support to request tenant reactivation. Use the global support phone numbers listed in the documentation and open a support case; do not submit multiple requests while one is in progress.
- While the tenant is blocked, app registrations and Microsoft Graph API access in that tenant cannot be used. After Microsoft reactivates the tenant, app registrations will again be able to obtain tokens and access protected resources.
If the tenant ends up being unrecoverable (blocked for more than 20 days and deleted), a new tenant must be created and new app registrations configured there for Microsoft Graph API access.
References:
- Tenant inaccessible due to inactivity
- Error message: interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity - Microsoft Q&A
- 7 Day Old Azure Account: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
- Error message: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A