Providing the windows login is created on both the principal and the seconday then upon failover the should work. There is no dependancy on the SID with windows logins unlike SQL Logins, so your user will not be orphaned.

But if you want the SIDS to be the same on both to be extra cautious you can script the login from the primary and recreate it on the secondary.