A cloud-based identity and access management service for securing user authentication and resource access
The error page shows:
Error code: interaction_required
Error message: AADSTS5000228: Access to '<tenant-id>' tenant is denied. Please contact your administrator.
This means the Azure AD tenant that the account is trying to use is not accessible for that user (for example, blocked, inactive, or the user has no rights in that tenant).
Use these steps that align with similar Azure sign-in issues in the provided context:
- Clear browser state and sign in again
A comparable Azure access issue was resolved by signing out of all Microsoft accounts and clearing all site data in the browser, then signing in again. This ensures the correct account and tenant are used when opening the Azure portal. - Target the tenant explicitly in the URL
For tenant-access problems, it is recommended to sign in by specifying the tenant in the portal URL:-
https://portal.azure.com/<TenantId> - or
https://portal.azure.com/<yourTenantName>.onmicrosoft.comThis can help if the browser is trying to send the account to a different or old tenant that denies access.
-
- Check if the tenant is blocked or inactive
When a tenant is blocked due to inactivity, sign-in attempts fail with an AADSTS5000225 error and the tenant becomes inaccessible. In such cases, administrators must contact Microsoft to reactivate the tenant within the allowed time window by using the global support phone numbers. If the tenant associated with the new Office 365 account is in a similar blocked state, only Microsoft support can restore access. - Use another accessible tenant to reach support if needed
If there is another tenant where the account has access (or another admin account exists), sign in to that tenant, open the Azure portal, and create a support request about the denied tenant. This pattern is used in similar scenarios where users cannot directly access the affected tenant.
If none of these steps restore access and there is no other administrator for the tenant, the next step is to contact Microsoft support (using any tenant or subscription that can reach the portal) and request help with tenant access for the account shown in the error.
References: