Sign in failed - Error code: AADSTS5000224 - 2026

Microsoft Support must review and, if eligible, re-enable the deauthenticated tenant; AADSTS5000224 has no portal-side recovery when the tenant itself cannot authenticate.

Request tenant reactivation

1. Contact Microsoft customer support using the sign-in-independent regional support route and select business/Azure technical support where prompted.^1^
2. Describe the request as:

   Azure/Microsoft Entra tenant recovery — AADSTS5000224. The tenant is deauthenticated, all administrator sign-ins are blocked, and Azure Portal is inaccessible. Please review the tenant and escalate the request to the team that can re-enable tenant authentication.

3. Provide the following only through Microsoft’s private support channel, not in a public Q&A post:
   • Tenant ID and, if known, the *.onmicrosoft.com tenant domain
   • Subscription ID
   • Administrator sign-in name
   • The complete error text
   • UTC timestamp, trace ID, and correlation ID from the failed sign-in
   • Relevant billing records or proof of ownership
   • The Terms of Service email, including its date and full wording
4. Keep the resulting case number and avoid opening duplicate requests while Microsoft is reviewing it. Recent matching AADSTS5000224 cases were resolved only after Microsoft engineering re-enabled authentication.^2^

Recovery is not guaranteed if the tenant has already reached permanent deletion, but support-led review is the appropriate recovery path.^3^

About the Terms of Service notice

The error alone does not identify which Terms of Service condition triggered the action. The matching Q&A cases describe AADSTS5000224 as tenant authentication being disabled and requiring engineering intervention, but they do not establish the account-specific reason.^4^

Ask support to provide:

• The specific policy or Terms of Service section involved
• Whether the action concerned the tenant, subscription, billing account, or personal Microsoft account
• Whether reactivation is possible and subject to a deadline
• What activity must be avoided or configuration changed before using Azure again

Do not assume this was ordinary inactivity. Microsoft’s documented inactivity lifecycle produces AADSTS5000225, not AADSTS5000224. In that separate scenario, administrators have 20 days to request reactivation before deletion.^5^

If the personal Microsoft account itself were locked for a Terms of Use issue, Microsoft documents a separate reinstatement flow shown during account sign-in. That is different from the tenant-deauthenticated message presented here.^6^

Deleting the VM and its associated resources does not delete or reactivate the Microsoft Entra tenant. Once access is restored, review the tenant and subscription state with support before creating new resources.

References

1. Contact Microsoft customer support
2. I cannot access my Azure tenant due to AADSTS5000224. - Microsoft Q&A
3. Azure Sign-in failed with error AADSTS5000224 - Microsoft Q&A
4. Sign-in failed Error code: AADSTS5000224 The tenant has been deauthenticated and is no longer available. - Microsoft Q&A
5. Tenant inaccessible due to inactivity
6. Microsoft account has been locked | Microsoft Support