When you have a DigiCert PKI Platform 8 Enterprise Gateway installed in a multiple domain forest, you may run into authentication issues with users enrolling for certificates across the forest.
Please see the attached PDF for steps on how to configure Enterprise Gateway and Autoenrollment Server to work in these types of configurations.
If you need further assistance, contact DigiCert PKI Support.