How to fix Error code: AADSTS5000225 in Azure Tenant

Error code AADSTS5000225 indicates that the Microsoft Entra tenant has been blocked due to inactivity.

To address this, use the following steps depending on the situation:

1. Check tenant inactivity window
   Tenants blocked for inactivity can be reactivated only within 20 days of entering the inactive state. After 20 days, the tenant is permanently deleted and cannot be recovered.
2. If tenant has been inactive less than 20 days
   • A tenant administrator must contact Microsoft support to request reactivation.
   • Use the global support phone numbers listed in Microsoft documentation to reach support and provide tenant details as requested.
   • While waiting for a decision, avoid submitting multiple assistance requests for the same tenant.
3. If tenant has been inactive more than 20 days
   • The tenant is permanently deleted and cannot be restored.
   • Create a new tenant and configure Azure DevOps and other services again under the new tenant.
4. Try direct tenant sign-in (if still within recovery window)
   • Attempt to sign in directly to the Azure portal using the tenant identifier, for example:
     • https://portal.azure.com/<TenantId>
     • or https://portal.azure.com/<yourTenantName>.onmicrosoft.com
   • If sign-in succeeds, open a support request from within the portal (if not on a free-only subscription) to request tenant reactivation.
5. If portal access is blocked but account still has an Azure free subscription
   • Use a clean browser session (for example, Chrome Incognito with all site data cleared).
   • Go to https://signup.azure.com and sign in with the same account.
   • If prompted that a previous Azure free account exists with remaining free services, follow the flow to upgrade to a pay-as-you-go account (for example, a basic pay-as-you-go tier). This can restore access in some cases where the tenant is blocked due to subscription state.
6. If unable to access Azure at all but need a working tenant
   • Sign in to https://entra.microsoft.com/.
   • Go to Entra ID → Overview → Manage tenants and create a new tenant.
   • Note the new tenant domain name (for example, xxx.onmicrosoft.com).
   • Then sign in to the Azure portal using https://portal.azure.com/xxx.onmicrosoft.com.
   • From this new tenant, configure Azure DevOps or open support tickets as allowed by the subscription.

For Azure DevOps specifically, if the backing Entra tenant is blocked or deleted, Azure DevOps sign-in will fail until the tenant is reactivated (within the 20‑day window) or a new tenant is created and Azure DevOps is reconfigured against it.

References:

• Error message: interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity - Microsoft Q&A
• 7 Day Old Azure Account: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
• Error message: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
• Personal Microsoft account cannot be closed due to organization link (Error AADSTS5000225) - Microsoft Q&A
• Can not access Azure - Microsoft Q&A