vSphere 5.1 SSO and Cross-domain Authentication

Last week I was installing vSphere 5.1, which includes the SSO component in an environment with a Forest domain and many child domains. I noticed some very strange behavior when setting up permissions within vCenter when using universal security groups that existed at the forest root domain, but had members from child domains. I submitted an SR to VMware and …