This issue occurs only when you have no trust relations between trusted and untrusted domains.
Value Proposition: An administrator will be able to manage groups users from untrusted console based on usernames/group names instead of granting permissions for SIDs and creating one sql user for one user in untrusted domain.