Currently the RESTAPI supports disabling SSO for a VM sending an empty list of SSO methods:

---8<---
#!/bin/sh -ex

url="https://engine.example.com/ovirt-engine/api"
user="admin@internal"
password="******"

curl \
--insecure \
--user "${user}:${password}" \
--request PUT \
--header "Content-Type: application/xml" \
--header "Accept: application/xml" \
--data '
<vm>
  <sso>
    <methods/>
  </sso>
</vm>
' \
"${url}/vms/7db0f6c8-7328-4cd3-ac06-1ac875511bb3"
--->8---

But this isn't possible with the CLI, as using an empty value for the "--sso-methods-method" option produces an error:

---8<---
[oVirt shell (connected)]# update vm myvm --sso-methods-method ""
============================ ERROR =========================
invalid syntax at "--sso-methods-method", see help on
collection based arguments for more details.
============================================================
--->8---

This happens for any element that allows an empty list of values, not just for SSO methods.

In these cases, when given an empty value, the CLI should send an empty list.