anchor.diff:  8.  Completing the Certificate Export Wizard: check the settings are correct, and click `Finish`
   9.  Exit the `Certificate` dialog
   
  -#### Step 1.4 Update the authentication policy
  +#### **Step 1.4 Update the authentication policy**
   
   From the `Service` section of the `ADFS` console tree, select the `Authentication Methods` subsection
   
  
positive.code: 
  For more information on what other attributes Buildkite accepts, see the [SAML User Attributes](/docs/integrations/sso/custom-saml#saml-user-attributes) table in the Custom SAML Guide.
  
  #### Step 1.3 Export the token signing certificate
  
  From the `Service` section of the `ADFS` console tree, select the `Certificates` subsection
  
  
negative.code: 
  The instructions below will guide you through using a series of wizards to:
  
  * Add a 'Relying Party Trust'
  * Add an 'Issuance Transform Rule', a type of 'Claim Rule'
  * Export the Token-signing Certificate
  * Update the Authentication Policy
  
  With these wizards, you'll set up your domain for SSO and retreive the information the Buildkite team requires to complete the setup process.
  
  