Tenant Authentication Error during Azure for Students verification for MLSA Program

The tenant and domain issues described cannot be fixed from the student side and require direct intervention from Microsoft support or the program’s support channel. The only supported path in this situation is to open a support ticket and work with the support team to complete academic verification.

Because the automated flow is failing due to tenant/domain problems, use these approaches:

1. For Microsoft Learn / Education program domain issues (academic verification)
   • If the portal shows that the academic email domain is blocked, unverified, or requires action, sign in to the relevant education/learning portal and use its Help or Support entry point to open a ticket.
   • For Microsoft Learn for Educators (MSLE), the documented process when a school domain is not recognized is:
     1. Sign in to the MSLE portal.
     2. Select Help and create a support ticket.
     3. Provide any requested documents (for example, domain registration records, purchase receipts, accreditation certificates, or letters from your institution’s education authority).
   • The same pattern applies to other academic programs: when automated domain recognition fails, support must manually validate the institution and mark the domain as academic.
2. If sign-in is blocked by tenant or account issues
   • If the error is related to Azure AD / Microsoft Entra sign-in (for example, tenant blocked, tenant restrictions, or account not existing in a specific tenant), only a tenant administrator or Microsoft support can correct it.
   • If the tenant has been blocked due to inactivity (error AADSTS5000225), reactivation is only possible within a limited window and must be requested by a tenant administrator through Microsoft support. After the allowed period, the tenant is permanently deleted and cannot be recovered.
   • If access is blocked by tenant restrictions ("Your network administrator has blocked access"), only the work/school organization’s administrator can change that policy.
3. Practical next steps for this scenario
   • Use a clean browser session (InPrivate/Incognito) and sign in only with the personal Microsoft account intended for MLSA.
   • Go to the MLSA / Microsoft Learn registration page and attempt registration again; if the domain is still not recognized, look for any Help, Support, or Contact us option on that page and submit a ticket from there, clearly stating:
     • That the university domain is not recognized for academic verification.
     • That tenant-based sign-in loops prevent using Azure portal support.
     • Full name, personal Microsoft account address, university email address, and institution name.
   • Be prepared to provide, via the secure support channel, scans of the student ID card or enrollment proof, and any public accreditation information for the institution, so support can manually validate academic status and update the domain.

Changes such as manually validating an academic domain, overriding automated checks, or fixing tenant-level sign-in issues cannot be performed through forums or self-service alone; they must be handled by Microsoft support or the relevant program’s operations team via a support ticket.

References:

• Program Options and Sign-up
• How to fix the error message "Your network administrator has blocked access"
• Introduction to Microsoft Entra tenants
• Error message: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
• 7 Day Old Azure Account: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
• Error message: interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity - Microsoft Q&A