anchor.diff:      </tr>
   </table>
   
  -Save your new settings and you'll be returned to your provider page.
  +Save your new settings, and you'll be returned to your provider page.
   
   ## Step 3. Perform a Test Login
   
   Follow the instructions on the provider page to perform a test login. Performing a test login will verify that SSO is working correctly before you activate it for your organization members.
   
   <div class="Docs__troubleshooting-note">
  -  <p>Google warn that "Changes may take up to 24 hours to propagate to all user". We've observed some changes taking at least several hours, so if the test login fails it is worth waiting a while and trying again.</p>
  +  <p>According to Google, "Changes may take up to 24 hours to propagate to all user". Some changes may take at least several hours, so if the test login fails, it is worth waiting and trying again.</p>
   </div>
   
   ## Step 4. Enable the new SSO Provider
  
positive.code: Log into your [Google Admin Console](https://admin.google.com), and follow these instructions:
  
  1. In the 'Apps' area of the console, select the 'Web and mobile apps' submenu.
  1. Click the 'Add App" menu at the top of the table and choose 'Search for apps'
  1. Search for 'Buildkite', and select 'Buildkite Web (SAML)'
  1. Copy down the SSO URL and Entity ID, and download the Certificate. You'll need these in Step 3.
  1. Enter the following Service Provider Details:
      * ACS URL: the URL you copied in Step 1. Replace any existing value suggested by Google.
      * Entity ID: https://buildkite.com
  
negative.code:   <p>You can also set up SSO providers manually with GraphQL. See the <a href="/docs/integrations/sso/sso-setup-with-graphql">SSO Setup with GraphQL Guide</a> for detailed instructions and code samples.</p>
  </div>
  
  Once this process is complete, users will be able to sign into Buildkite by clicking the Buildkite icon in the Google Apps menu hidden behind a 9-dot "waffle" icon.
  
  ## Step 1. Create a Buildkite SSO Provider
  
  