diff --git a/pkg/setting/setting.go b/pkg/setting/setting.go
index 75c72d471b4..1983bfbb2f9 100644
--- a/pkg/setting/setting.go
+++ b/pkg/setting/setting.go
@@ -1630,7 +1630,7 @@ func readAuthSettings(iniFile *ini.File, cfg *Cfg) (err error) {
 	cfg.JWTAuthSkipOrgRoleSync = authJWT.Key("skip_org_role_sync").MustBool(false)
 
 	// Extended JWT auth
-	authExtendedJWT := iniFile.Section("auth.extended_jwt")
+	authExtendedJWT := cfg.SectionWithEnvOverrides("auth.extended_jwt")
 	cfg.ExtendedJWTAuthEnabled = authExtendedJWT.Key("enabled").MustBool(false)
 	cfg.ExtendedJWTExpectAudience = authExtendedJWT.Key("expect_audience").MustString("")
 	cfg.ExtendedJWTExpectIssuer = authExtendedJWT.Key("expect_issuer").MustString("")