Symptoms
Users cannot access K2 Designer website after upgrade 4.7
We added AD usergroups into authentication IIS however it doesn't work anymore after upgrade 4.7
We added temp All users
Diagnoses
In 4.6.9 group claims were added to the authentication claim in order to create authorization rules in IIS, however it caused a lot of instability and performance issues in big customer environments.
We then changed the default of this functionality to be off.
Resolution
To re-enable this functionality, you need to edit the web.config file in the Windows STS folder (ie C:Program Files (x86)K2 blackpearlWebServicesIdentityStsWindows) and add the following setting under the appsettings node:
Please make sure you do a proper clearing of the browser cache and do an IISRESET before testing
