I think I have an understanding but wanted clarification. When you install & setup vCenter server for the first time, in Stage 2 there's a step for "SSO Configuration". Under "Create a new SSO domain" where it asks for the "Single Sign-On domain name", by default you can put vsphere.local or anything you want. If your planning to join vCenter to an AD domain would you fill in your AD domain name here or add that as an identify source later on once vCenter is up and running. I'm a little confused whether to think of vCenter's SSO as its own separate identity or if I join to a existing domain for my users and groups.
Thanks in advance for any suggestions.