A cloud-based identity and access management service for securing user authentication and resource access
The error interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity means the Azure AD/Microsoft Entra tenant that the Azure portal is trying to use for sign-in has been marked inactive and blocked.
Key points and actions:
- Understand what the error means
- The tenant associated with the account being used has been inactive long enough that Microsoft has blocked sign-in.
- As described in the referenced Q&A, this typically happens when a tenant has been inactive for an extended period; after a further grace period it is permanently deleted and cannot be recovered.
- Check whether the tenant can still be reactivated
- Tenants can only be reactivated within a limited window after they are blocked. One Q&A notes that administrators can request reactivation within 20 days of the tenant entering an inactive state; after that, the tenant is deleted and cannot be restored.
- If the tenant has been blocked for less than the allowed period, the tenant administrator must contact Microsoft support to request reactivation. Use the “Contact support” option on the sign-in error page or the global support phone numbers for Azure/Microsoft 365.
- Try signing in directly with a specific tenant
- If multiple accounts and tenants are mixed, explicitly target the tenant in the Azure portal URL:
-
https://portal.azure.com/<TenantId> - or
https://portal.azure.com/<yourTenantName>.onmicrosoft.com
-
- This can help ensure the browser is not silently switching to a blocked or wrong tenant.
- If multiple accounts and tenants are mixed, explicitly target the tenant in the Azure portal URL:
- Clean up cached sign-ins and account mix-ups
- Because multiple Microsoft accounts are being mixed (GitHub-linked, education, personal, etc.), clear cached sessions:
- Sign out of all Microsoft accounts in the browser.
- Clear cookies and site data for Microsoft/Azure sites.
- Then open a private/incognito window and sign in again with the intended work/school or personal account.
- One user with a similar “cannot access Azure” issue resolved it by signing out of all Microsoft accounts and clearing all site data in the browser before signing in again.
- Because multiple Microsoft accounts are being mixed (GitHub-linked, education, personal, etc.), clear cached sessions:
- If the tenant is already permanently deleted
- If the tenant has been blocked for longer than the allowed reactivation period, it is permanently deleted and cannot be recovered.
- In that case, create or use a different active tenant:
- Sign in to the Microsoft Entra admin center (
entra.microsoft.com) with an account that can still authenticate. - Go to Entra ID → Overview → Manage tenants and create a new tenant.
- Then access the Azure portal using the new tenant domain, for example:
https://portal.azure.com/<newTenantName>.onmicrosoft.com.
- Sign in to the Microsoft Entra admin center (
- From the new tenant, subscriptions and resources would need to be recreated, as the old tenant cannot be restored.
- If still blocked and within the reactivation window
- Ensure the global administrator of the blocked tenant contacts Microsoft support (for example, via the phone numbers listed for Unified Support or via a support request if any subscription is still accessible) and explicitly requests tenant reactivation due to inactivity.
- Do not open multiple support cases for the same tenant; wait for a decision on the first case.
These steps address both the tenant-blocked error and the account mix-up by forcing a clean sign-in and, if necessary, working with Microsoft to reactivate or replace the inactive tenant.
References:
- Troubleshoot Azure subscription sign-in issues
- Error message: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A Sign-in failed. I signed up for a free account so I could complete Azure training, and got the email with "Welcome to Azure
- 7 Day Old Azure Account: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
- Error message: interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity - Microsoft Q&A
- Can not access Azure - Microsoft Q&A