Hi Browlin
Did you get the error when you are logging in with domain user from AD?
Have you tried logging in with username administrator@vsphere.local?
After adding user / group from AD you will need to add the permissions from vSphere Client/Web Client using administrator@vsphere.local.
See the installation guide here
Identity Sources for vCenter Server with vCenter Single Sign-On: vSphere 5.5 Documentation Center
"vCenter Single Sign-On does not propagate permissions that result from nested groups from dissimilar identity sources. For example, if you add the Domain Administrators group to the Local Administrators group, the permissions are not propagated because Local OS and Active Directory are separate identity sources."
The domain alias is also important, you would need to use the correct/exact domain alias, see this KB: http://kb.vmware.com/kb/2035510
Check the default domain that is configured in vCenter SSO using administrator@vsphere.local user.
If the default domain is not your AD domain, then to login using AD user you must specify the domain in one of the following ways:
- Including a domain name prefix, for example, MYDOMAIN\user1
- Including the domain, for example, user1@mydomain.com
Hope this helps.
Thanks,
Bayu