Ensure automatically identity resources are discovered by SSO during installation itself. If not, add them manually through vSphere webclient. If you have two way trust relationship between domains, accordingly identity resources will be discovered.
Regards
Girish
