Realms and Audiences

A Realm is a key value that tells the STS what claims to put in the token. You may see realm URIs in the format of urn:sharepoint.denallix.com or something that looks more like a regular URL, such as https://k2.denallix.com/Designer/. It doesn't matter what format it is in, as long as it's unique and has some claims associated with it.

You should create separate relying party trusts for each of the K2 web applications that may need to crack a claim and verify an identity, for example the K2 Designer (/Designer/), the SmartForms Runtime (/Runtime/) and View Flow (/ViewFlow) sites.

On the Realms page you can Add, Edit or Delete Realms and associated Audiences. Click on a Realm to see the associated Audiences for that Realm.

The Audience portion of the Realm is simply one or more URLs that are tied to a particular realm but that are for different services. In most cases you'll have a 1:1 mapping between Realms and Audiences, but you may have many URLs that are all tied to a single Realm. If you access your SmartForms runtime site by both https://k2.denallix.com/runtime and https://dlx:81/runtime, for example, they must both be configured as audiences for your /Runtime/ realm.

Deleting or editing Realms might break services or applications that rely on those items. Do not delete or edit these items unless you understand the impact of doing so.