The error AADSTS5000225 indicates that the Microsoft Entra tenant is blocked due to inactivity and has entered the inactive stage of the tenant lifecycle.

Key points from the tenant lifecycle policy:

• When a tenant is marked inactive, sign-ins are blocked and this error is expected.
• Administrators can request reactivation only within 20 days of the tenant becoming inaccessible.
• If the tenant remains inaccessible for more than 20 days, it is deleted and cannot be recovered.

To attempt reactivation (tenant admin required):

1. Confirm that the tenant has been inactive for less than 20 days. If it is older than 20 days in the inactive state, it is already deleted and cannot be restored.
2. The tenant administrator must contact Microsoft support and request tenant reactivation. Use the global support phone numbers listed in the documentation.
3. Do not submit multiple support requests for the same tenant; wait for Microsoft’s decision on the existing case.

If reactivation is not possible or the tenant is already deleted:

• The tenant will be or has been permanently deleted and cannot be recovered.
• Review Microsoft’s data protection policies for details on data handling and deletion.
• If continued use of Azure services is required, create or use another active tenant and configure subscriptions and resources there.

References:

• Tenant inaccessible due to inactivity
• Error message: interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity - Microsoft Q&A
• 7 Day Old Azure Account: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
• Error message: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A