anchor.diff:    ) {
       ssoProvider {
         state
  -      url
       }
     }
   }
  
positive.code:     ssoProvider {
        state
        url
      }
    }
  }
  ```
  
  If your SSO provider requests an ACS URL, you should provide the URL returned by the `url` property, for example `https://buildkite.com/sso/...`
  
  ### Step 4
  
  
negative.code: 
  ### Step 2
  
  The next step is to log into your SSO provider’s system and setup Buildkite using the details from the GraphQL response above.
  
  If the SSO provider supports a metadata URL, you can use the `url` property of the `metadata` object. If your SSO provider does not support metadata URL, use the `ssoURL` property for the ACS URL or SSO URL, and the `issuer` property for the Issuer or Entity ID.
  
  ### Step 3
  
  If your provider shows a metadata URL to complete the setup, you can use that with the `ssoProviderUpdate` mutation to have Buildkite automatically complete the setup. This will not yet affect any of your Buildkite users.
  
  ```graphql
  mutation UpdateProviderMetaData {
  