Hi, @shahidmir. I just got around to paying closer attention to this.
Yes, my read of Sam’s message is that you’d need to submit a PR that adds shadowed_by_global: true to the SSO field(s) that you want to set with an environment variable and that he’d likely accept it. That seems like the cleanest solution to your problem.
My uploader would also be a solution, but the trick with it is that you need the API key, which is something of a bother to set/get.
If you have a github account, you can simply visit the site_settings.yml link above, click the pencil icon, edit the file, save, and submit a PR. Spaces are very, very important in yml files, so it would be safest to copy-paste another “shadowed_by_global: true” line so that you don’t inadvertently enter a tab or the wrong number of spaces.