Managing external identities to enable secure access for partners, customers, and other non-employees
The error indicates that the Azure AD tenant behind the personal Azure subscription has been blocked due to inactivity (AADSTS5000225). When a tenant is blocked this way, normal sign-in to Azure resources is prevented until it is either reactivated (within a limited time window) or permanently deleted.
Based on the documented behavior:
- A tenant that becomes inactive is put into a blocked state and sign-ins fail with:
-
AADSTS5000225: This tenant has been blocked due to inactivity.
-
- Administrators have up to 20 days from when the tenant enters this inactive/blocked state to request reactivation.
- After 20 days in this state, the tenant is deleted and cannot be recovered.
To proceed:
- If the tenant has been blocked for less than 20 days:
- As the tenant administrator, contact Microsoft support and request tenant reactivation. Use the global support phone numbers listed under “Administrators” in the tenant-inactivity guidance.
- Do not open multiple support cases for the same issue; wait for the response on the first case.
- If the tenant has been blocked for more than 20 days:
- The tenant is deleted and cannot be restored. In that case, a new tenant must be created and associated with the Azure account.
Additional practical options shown in similar cases:
- Try signing in directly to the Azure portal with the tenant identifier in the URL, for example:
-
https://portal.azure.com/<TenantId>or -
https://portal.azure.com/<yourTenantName>.onmicrosoft.comThis sometimes allows access to tenant management to open a support ticket if still within the recovery window.
-
- If the tenant is unrecoverable and access to Azure is still needed under the same Microsoft account, create a new tenant from Entra ID:
- Sign in to
https://entra.microsoft.com/. - Go to Entra ID → Overview → Manage tenants.
- Create a new tenant and note its domain name.
- Then access Azure portal using
https://portal.azure.com/<newTenantDomain>.
- Sign in to
If the original tenant is still within the 20‑day window, the primary and recommended path is to contact Microsoft using the global support phone numbers and request reactivation of the blocked tenant.
References:
- Tenant inaccessible due to inactivity
- 7 Day Old Azure Account: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
- Error message: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
- Error message: interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity - Microsoft Q&A