![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(268.8, 51%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAB%3C/text%3E%3C/svg%3E)
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(201.6, 99%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER%3C/text%3E%3C/svg%3E)
The error interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity means the Microsoft Entra tenant behind the Azure subscription has been marked inactive and sign-ins are blocked.
Resolution depends on how long the tenant has been inactive:
- If the tenant has been inactive (blocked) for less than 20 days
- The tenant can still be reactivated.
- A tenant administrator must contact Microsoft support and request reactivation:
- Use the global support phone numbers listed here: global support phone numbers.
- After opening a case, do not submit additional requests for the same issue until support responds with a decision.
- If the tenant has been inactive (blocked) for 20 days or more
- After 20 days in the inaccessible state, the tenant is permanently deleted and cannot be recovered.
- In this case, the only option is to work with or create a different tenant (for example, by creating a new tenant in Microsoft Entra ID and then using that tenant in the Azure portal).
Additional practical steps seen in similar cases:
- Try signing in directly to the tenant in the Azure portal using its tenant ID or tenant name in the URL, for example:
-
https://portal.azure.com/<TenantId> -
https://portal.azure.com/<yourTenantName>.onmicrosoft.com
-
- If the original tenant cannot be recovered and access to Azure is still required, create a new tenant in Microsoft Entra admin center (
https://entra.microsoft.com→ Entra ID → Overview → Manage tenants → Create new tenant), then use that tenant’s domain or ID in the Azure portal URL to start working with the new tenant.
If the tenant must be unblocked and it has been less than 20 days since the block, contacting Microsoft support as a tenant administrator is mandatory; there is no self-service unblock for this condition.
References:
- Tenant inaccessible due to inactivity
- 7 Day Old Azure Account: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
- Error message: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
- Error message: interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity - Microsoft Q&A