Symptoms

Offline Forms and Application forms not accessible and key chain error
 

Diagnoses

In this scenario K2 mobile app is able to connect to K2 server and retrieve tasks. However, after adding the K2 offline license key you still unable to see the application/offline forms functionality on the mobile device.

Moreover, periodically you receive "could not authenticate" error message in the mobile app. If after receiving this you log out you may see that the username will contain the security label "K2:" before the domainusername (whereas it was not entered that way). After this if K2 label is removed and you try to login again, it gives a Keychain access error and you have to completely close the app before restarting.

Resolution
 

This can be caused by an issue with resolving users' groups for certain users due to hidden AD groups they belonged to. An ADUM coldfix allowing to handle hidden groups correctly is available for this issue via request to K2 support.

Please also note that the same error message ("Keychain Error - Restart application") can be thrown by K2 Mobile app when you use wrong URL (e.g. HTTPS instead of HTTP).