It can be either but my preference has always been to create a service account in the domain
and use that so I always know exactly who is connecting where. You can double check that
you are using valid credentials by first using them to sign in successfully to the vCenter via the vSphere client
and then configure them in Orion.