Change SSO Domain on 6.7

I set the SSO Domain years ago to the same domain as my active directory domain. This conflict means I cannot enable active directory as a identity source.

Any way of changing the SSO domain back to vsphere.local or something else post deployment?