anchor.diff:  
   1. _Choose rule type_: _Send LDAP Attributes as claims_
   2. _Configure claim rule_:
  -	- _Claim Rule Name_: Get Attributes
  -	- _Attribute Store_: Active Directory
  -	- _Mapping of LDAP Attributes to outgoing claim types_:
  +	* _Claim Rule Name_: Get Attributes
  +	* _Attribute Store_: Active Directory
  +	* _Mapping of LDAP Attributes to outgoing claim types_:
   		- _LDAP Attribute_: Email Addresses, Outgoing claim type: Email address
   		- _LDAP Attribute_: Display-Name, Outgoing claim type: Name
   3. Click _Finish_ to add the rule
  
positive.code: 
  1. _Choose rule type_: _Transform an incoming claim_
  2. _Configure claim rule_:
  	- _Claim Rule Name_: Name ID Transform
  	- _Incoming Claim Type_: Email address
  	- _Outgoing Claim Type_: Name ID
  	- _Outgoing Name ID Format_: Email
  	- Select _Pass through all claim values_
  3. Click _Finish_ to add the rule
  
  Rule 3
  
  1. _Choose rule type_: _Send claims using a custom rule_
  2. _Configure claim rule_:
  	- _Claim Rule Name_: Attribute Name Transform
  	- _Custom Rule_:
  		<pre><code>c:[Type == "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name"]
  		=> issue(Type = "Name", Issuer = c.Issuer, OriginalIssuer = c.OriginalIssuer, Value = c.Value, ValueType = c.ValueType);</code></pre>
  3. Click _Finish_ to add the rule.
  
negative.code: 
  The instructions below guide you through using a series of wizards to:
  
  + Add a Relying Party Trust
  + Add an Issuance Transform Rule, a type of Claim Rule
  + Export the Token-signing Certificate
  + Update the Authentication Policy
  
  With these wizards, you'll set up your domain for SSO and retrieve the information the Buildkite team requires to complete the setup process.
  
  