Share via

Sign-in failed Error code:

Susmita Mishra 0 Reputation points
2026-04-17T16:12:49.27+00:00

I am getting this error

interaction_required Error message: interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity. To learn more about tenant lifecycle policies, see https://aka.ms/TenantLifecycle Trace ID: 7a8bca3c-f492-4

Microsoft Security | Microsoft Entra | Microsoft Entra ID

2 answers

Sort by: Most helpful
  1. VEMULA SRISAI 13,405 Reputation points Microsoft External Staff Moderator
    2026-04-23T13:30:27.01+00:00

    Hello Susmita Mishra,

    I have contacted the engineering team, and they have reactivated your tenant from the backend and removed the block. You should now be able to access the Azure Portal without any issues. Please try logging in and let me know if you experience any problems.

     

    I hope this information is helpful. Please feel free to reach out if you have any further questions.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". Thanks

    Was this answer helpful?


  2. AI answer

    2026-04-17T16:13:03.43+00:00

    The error interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity means the Microsoft Entra tenant is in an inactive, blocked state and sign-ins are intentionally being prevented.

    Key points from the tenant lifecycle behavior:

    • When a tenant is marked inactive, sign-ins start failing with AADSTS5000225.
    • Administrators can request reactivation only within 20 days after the tenant becomes inactive.
    • If the tenant remains inactive for more than 20 days after being blocked, it is permanently deleted and cannot be recovered.

    To proceed, the appropriate action depends on the role and the tenant state:

    1. If administrator access to that tenant exists and it has been less than 20 days since it was blocked:
      • The tenant administrator must contact Microsoft support to request reactivation. Use the global support phone numbers listed in the documentation.
      • Do not open multiple support requests for the same issue; wait for the decision on the existing case.
    2. If the tenant has been blocked for more than 20 days:
      • The tenant is deleted and cannot be restored.
      • A new tenant must be created if continued use of Microsoft Entra ID/Azure is required.
    3. If only application access is affected (for example, an app using MSAL receives this error):
      • The error is surfaced as interaction_required, which is a standard OAuth2 error indicating that user interaction is needed.
      • However, in this specific case the underlying cause is the blocked tenant, so interactive sign-in alone will not succeed until the tenant is reactivated by an administrator as described above.

    If the tenant is not intended to be reactivated, no further action is required; it will be deleted automatically after the 20‑day inactive period.


    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.