anchor.diff:  
   <%= image "custom-saml-settings.png", width: 1746/2, height: 926/2, alt: "Screenshot of the Buildkite Custom SAML Settings Page" %>
   
  -If you already have an SSO Provider, select it from the list of Configured SSO Providers. Click the 'Edit Settings' button, and choose an option for entering your meta-data:
  -
  -
  -
  -## Option B - Create a new SSO Provider
  -
  -Click the Buildkite Organization Settings' Single Sign On menu item, then choose the Custom SAML provider from the available options:
  -
  -<%= image "sso-settings.png", width: 1458/2, height: 926/2, alt: "Screenshot of the Buildkite SSO Settings Page" %>
  -
  -Choose how you'd like to configure your Custom SAML Provider:
  -
  -
  -
  -## Step 3. Perform a Test Login
  +After completing your chosen option, [Perform a test login](#perform-a-test-login), then [Enable the new SSO provider](#enable-the-new-sso-provider).
  +
  +## Perform a test login
   
   Follow the instructions to perform a test login. Performing a test login will verify that SSO is working correctly before you activate it for your organization members.
   
  -## Step 4. Enable the new SSO Provider
  +## Enable the new SSO provider
   
   Once you've performed a test login you can enable your provider. Activating SSO will not force a log out of existing users, but will cause all new or expired sessions to authorize through your provider before organization data can be accessed.
   
  
positive.code: 
  <%= toc %>
  
  ## Step 1. Set up your provider
  
  There are two ways to set up your custom provider: using the Buildkite meta-data XML to your identity provider, or manually adding your Buildkite data into your identity provider. 
  
  After setting up your provider, you'll need to set up your SSO provider in your Buildkite organization's Single Sign On Settings.
  
  <div class="Docs__note">
    <p>You can also set up SSO providers manually with GraphQL. See the <a href="/docs/integrations/sso/sso-setup-with-graphql">SSO Setup with GraphQL Guide</a> for detailed instructions and code samples.</p>
  </div>
  
  ## Option A - Setting up your IdP using a meta-data URL or ACS URL
  
  A custom URL containing your organization's meta-data is available to help you complete your IdP's setup. This option will also generate an ACS URL for IdPs which require that during setup.
  
  Click the Buildkite Organization Settings' Single Sign On menu item, then choose the Custom SAML provider from the available options:
  
  
negative.code:     </tr>
  </table>
  
  If your IdP requires an ACS URL before it will provide the above information, follow the instructions in the [Set up with an ACS URL](#set-up-with-an-acs-url) section to generate one.
  
  If your custom provider needs further information, please email [support@buildkite.com](mailto:support@buildkite.com). 
  
  ### Create a Buildkite SAML provider
  
  Click the Buildkite Organization Settings' Single Sign On menu item, then choose the Custom SAML provider from the available options:
  
  <%= image "sso-settings.png", width: 1458/2, height: 926/2, alt: "Screenshot of the Buildkite SSO Settings Page" %>
  
  Choose an option for entering your IdP's information: a meta-data URL from your IdP, an XML file from your IdP, or by entering the data manually.
  
  Manual data entry requires the following three fields:
  
  <table>
      <tr>
  