A cloud-based identity and access management service for securing user authentication and resource access
The error indicates that the Azure AD/Microsoft Entra tenant backing the alternate account has been deactivated and is no longer available. When a tenant is blocked or deleted due to inactivity, sign-in to that tenant and any associated Azure subscriptions is no longer possible unless it is still within the reactivation window and Microsoft re-enables it.
Based on the documented behavior:
- Tenants that are blocked due to inactivity show errors like
AADSTS5000225or similar “tenant has been blocked/deauthenticated” messages when trying to sign in. - Administrators can request reactivation only within a limited period (20 days) after the tenant becomes inaccessible. After that, the tenant is permanently deleted and cannot be recovered.
- If the tenant is already beyond that window or fully deauthenticated, the subscriptions and directory cannot be restored. A new tenant and new subscription must be used instead.
Recommended actions:
- Confirm whether the tenant is just blocked for inactivity or already deleted:
- If the message matches the “tenant blocked due to inactivity” pattern, treat it as an inactive tenant.
- If reactivation might still be possible (within 20 days of being blocked):
- As an administrator of that tenant, contact Microsoft using the global support phone numbers and request tenant reactivation. See the guidance under “Administrators” in the tenant-inaccessible article.
- Do not open multiple parallel requests; wait for the decision on the first case.
- If the tenant has been inaccessible for more than 20 days:
- The tenant is deleted and cannot be recovered. Use or create another tenant and associate any new Azure subscriptions with that tenant.
- To continue using Azure as FTE with an alternate account:
- Sign in with a different, active tenant (for example, the primary corporate tenant) in the Azure portal directory picker.
- If needed, have the appropriate admin grant the required role assignments (such as Owner or other RBAC roles) in that active tenant so subscriptions are visible and usable.
If there is no other active tenant with the needed access, a new tenant and subscription must be created; the deauthenticated tenant cannot be used.
References:
- Tenant inaccessible due to inactivity
- No subscriptions found sign in error for Azure portal
- Frequently asked questions about Microsoft Entra ID
- 7 Day Old Azure Account: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
- Error message: interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity - Microsoft Q&A