Obiba realm handles authorization