Symptoms

Server Error: Could not find the Issuer to use for authentication.
After deploying a solution to APPIT with SP ON PREM (PandampD from SP Online Appit instance to SP OnPrem Appit instance) the customer receives the error message, and has to manually checkout and checkin each form and view to resolve.
 

Diagnoses

K2 is unable to hydrate the Claims Config settings from the value that was passed in the K2 Appit for SharePoint app’s _trust query string parameter in conjunction with the claims configuration in SmartForm’s claims web.config.
When the WSDFederation sign-in flow occurs to get the FedAuth/Claims cookie, we redirect to SmartForms which is where the SPAuth module/spAuthorize.aspx kicks in. The _trust QA parameter is typically “urn.microsoftonline” and this is used to build the realm config.

 

Resolution

Labs was able to trace and fix the issue, and it will be rolled into a future update (Update 5). In the meantime, fix was applied locally to the Customer's environment.