When attempting to use the cmsso-util domain-repoint command on a vCenter already configured inside of VCF 9.x the repoint causes the vCenter to lose connectivity to the VCF Ops and SDDC Manager.
VCF relies on a tightly coupled management stack and that any external manipulation of SSO via cmsso-util invalidates lifecycle management, breaks SDDC Manager communication, and strips non-default SSO users.
The use of cmsso-util domain-repoint is not supported once a vCenter is joined to the VCF stack. If a domain repoint is needed, it must be performed before adding the vCenter to VCF 9.x.