anchor.diff:  
   The instructions below will guide you through using a series of wizards to:
   
  -1.1 Add a 'relying party trust'
  -1.2 Add an 'issuance transform rule', a type of 'claim rule'
  -1.3 Export the token-signing certificate
  -1.4 Update the authentication policy
  +* Add a 'Relying Party Trust'
  +* Add an 'Issuance Transform Rule', a type of 'Claim Rule'
  +* Export the Token-signing Certificate
  +* Update the Authentication Policy
   
   With these wizards, you'll set up your domain for SSO and retreive the information the Buildkite team requires to complete the setup process.
   
  
positive.code: 
  In the `Actions` sidebar, you should now have a subheading `Buildkite`. 
  
  #### Step 1.2 Add an issuance transform rule
  
  From the `Buildkite` section of the `Actions` sidebar, click `Edit claim issuance policy...`
  
  
negative.code: 
  For more information on what other attributes Buildkite accepts, see the [SAML User Attributes](/docs/integrations/sso/custom-saml#saml-user-attributes) table in the Custom SAML Guide.
  
  #### **Step 1.3 Export the token signing certificate**
  
  From the `Service` section of the `ADFS` console tree, select the `Certificates` subsection
  
  