A cloud-based identity and access management service for securing user authentication and resource access
The error interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity means the Microsoft Entra tenant is in an inactive, blocked state as part of the tenant lifecycle. While blocked, sign-ins to that tenant are prevented.
Key points from the tenant lifecycle behavior:
- When a tenant is marked inactive, Microsoft blocks logins to that tenant and returns AADSTS5000225.
- Administrators have up to 20 days from when the tenant becomes inaccessible to request reactivation.
- If the tenant remains inactive and blocked for more than 20 days, it is permanently deleted and cannot be recovered.
To proceed, the appropriate actions depend on the role and the age of the block:
- If an administrator needs to reactivate the tenant and it has been blocked for less than 20 days:
- The tenant administrator must contact Microsoft support using the global support phone numbers to request reactivation.
- Do not submit multiple support requests for the same tenant while a case is in progress.
- If the tenant has been blocked for more than 20 days:
- The tenant is deleted after 20 days in the inaccessible state and is not recoverable.
- Review Microsoft’s data protection policies for details on data handling and deletion.
- For application owners or developers targeting this tenant:
- Minimize authentication requests against the blocked tenant until it is reactivated.
- Do not open multiple assistance requests; wait for Microsoft’s response on any existing case.
If access to Azure Portal is needed and the tenant is still within the recoverable window, the administrator can attempt to sign in directly to the tenant using its tenant ID or tenant name in the Azure Portal URL (for example, https://portal.azure.com/<TenantId> or https://portal.azure.com/<yourTenantName>.onmicrosoft.com) and then open a support case from there, if the subscription type allows support requests.
If the tenant is already beyond the 20‑day window and has been deleted, a new tenant must be created to continue using Microsoft Entra ID and related services.
References: