Move from embedded SSO to external SSO?

Is it possible to move from the 5.5 SSO instance embedded in the vCenter Appliance to an external SSO instance running on Windows? I tried doing this yesterday in a lab environment and could not get the web client to work properly. The C# client seemed to work fine.

Also, is there a way to export users and groups from the vsphere.local domain on one instance and import them on another?

Thanks...