If you have an email address such as "my.name@my-domain.com", the vSphere web client will not accept the email address when creating or editing the user to the SSO Users.
The error message given is:
The "Edit user" operation failed for the entity with the following error message.
com.rsa.command.exception.ValidationException: Invalid input data. Validation failed
Field: 'EMAIL', message: 'EMAIL contains invalid characters.'
Field: 'EMAIL', message: 'EMAIL contains invalid characters.'
Field: 'EMAIL', message: 'EMAIL contains invalid characters.'
Field: 'EMAIL', message: 'EMAIL contains invalid characters.'
A hypen is a perfectly acceptable character in a domain name.