Use instance owner instead of owner shell
* consolidate SSO settings * update saml settings * fix type error * limit user changes when saml is enabled * add test