...
In the Edit roles dialog enter the AD group name (prior to version 5.0.1 you need to enter the object SID), which is to be mapped to the DVI5 role. Members of the AD group will automatically be granted the permissions of the DVI5 role.
Enter the role name without the domain name.
Create initial agency
The first agency is created as described below in the forms authentication section.
...