When you accept PKI smart card users from unknown domains, you need to create a specific user group that defines the access rights for these smart card users.
Open the Settings Editor and go to: .
 
[Groups] tabClick [Add].
Select the check boxes that represent the access rights of the user group.
 
Add groupClick [OK].