![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(227.2, 78%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERJ%3C/text%3E%3C/svg%3E)
Microsoft Security | Microsoft Entra | Microsoft Entra ID
A cloud-based identity and access management service for securing user authentication and resource access
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 10%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
The error interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity means the Azure AD tenant tied to the account has been blocked because it was inactive. When this happens, sign-in to that tenant (and thus to Azure resources under it) is blocked.
Key points from the documented behavior:
- When a tenant is blocked due to inactivity, administrators have up to 20 days from when it becomes inaccessible to request reactivation. After 20 days in this state, the tenant is permanently deleted and can’t be recovered.
- In parallel, inactive billing accounts and tenants go through a lifecycle where they are blocked and then deauthorized/terminated if no action is taken. After termination, data and resources are permanently deleted and can’t be recovered.
To get unstuck and restore access so a new tenant can be created or billing can be fixed, the supported path is:
- If the tenant has been blocked for less than 20 days:
- As a tenant administrator, contact Microsoft using the global support phone numbers listed in the tenant-inactivity documentation. Explain that the tenant is blocked due to inactivity (AADSTS5000225) and request reactivation.
- Do not open multiple cases; wait for the response on the first case.
- If the tenant is tied to a blocked or inactive billing account:
- If the subscription was purchased directly from Microsoft, create an Azure support request as described in the billing-account article to get the billing account unblocked.
- If the account is under a partner or enterprise agreement, contact the partner or account manager to address the blocked billing account.
- If the tenant has been blocked for more than 20 days and is already deleted:
- The tenant cannot be recovered. In that case, support can help confirm the state, but a new tenant must be created under an active billing account.
- If sign-in to the portal is failing generically and the tenant might still exist:
- Try signing in with a tenant-specific endpoint such as
https://portal.azure.com/<TenantId>orhttps://portal.azure.com/<yourTenantName>.onmicrosoft.comas shown in the Q&A example. If that works, use the portal to open a support request.
- Try signing in with a tenant-specific endpoint such as
If none of the above works because the tenant is already beyond the 20‑day window and the billing account is terminated, the only supported option is to work with Microsoft support to confirm the state and then start with a new tenant and billing account.
References:
- Tenant inaccessible due to inactivity
- Keep your Microsoft business billing account active
- Troubleshoot Azure payment issues
- Resolve a past-due balance for your pay-as-you-go Azure subscription
- 7 Day Old Azure Account: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
- Error message: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
- Error message: interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity - Microsoft Q&A
- Tenant inaccessible due to inactivity - Microsoft Q&A