anchor.diff:  static data options:
   - identity provider (ssoURL and issuer and certificate)
   
  +```
  +ssoProviderCreate(input:{
  +  organizationId:"<paste your organization id here>",
  +  type:SAML,
  +  identityProvider:{
  +    ssoURL:"https://okta.com/111111111",
  +    issuer: "https://okta.com/aaaaaaaaa",
  +    certificate:"---BEGIN CERT---zga9d6fa98f7sa987d9829h"
  +  }
  +})
  +```
  +
   xml blob options:
   - identity provider (metadata > xml)
   
  +```
  +ssoProviderCreate(input:{
  +  organizationId:"<paste your organization id here>",
  +  type:SAML,
  +  identityProvider:{
  +    metadata:{
  +      xml: "..."
  +    }
  +  }
  +})
  +```
  +
   xml url options:
   - identity provider (metadata > url)
   
  +```
  +ssoProviderCreate(input:{
  +  organizationId:"<paste your organization id here>",
  +  type:SAML,
  +  identityProvider:{
  +    metadata:{
  +      url:"..."
  +    }
  +  }
  +})
  +```
  +
   ### Disable a provider
   
   - use the disable method
  
positive.code: - use the get method with your org slug to retrieve your org id
  - this id will be required in all other sso methods
  
  ### Create your SSO provider
  
  - use the create method to create a blank 
  - can choose from three different provider types: `SAML`, `GOOGLE_OAUTH`, and `GITHUB_OAUTH`
  
  SAML:
  
negative.code: ### Enable the provider for your organisation
  
  - after testing that the new authorisation url works and can log in a user with the correct email domain, you can enable the sso provider for your buildkite organisation
  - use the enable method with your provider id, you can retrieve this using the get mutation 
  
  ```
  mutation EnableProvider {
    ssoProviderEnable(
      input:{
        id:"<paste your provider id here>"
      }
    ) {
      ssoProvider {
        state
      }
    }
  }
  
  ```
  
  - check that it's enabled with the get method
  
  ### Update your provider data
  
  - use this if you've made a blank sso provider and need to add your provider information to it
  - also can be used to update your provider data if it changes
  
  ```
  mutation UpdateProvider {
    ssoProviderUpdate(input:{
      id:"<paste your organization id here>",
      identityProvider:{
        metadata:{
          url:"https://dev-242943.oktapreview.com/app/exkfs9l426YMuKPnM0h7/sso/saml/metadata"
        }
      }
    }) {
      ssoProvider {
        ...on SSOProviderSAML {
          identityProvider {
            issuer
            certificate
            ssoURL
            metadata {
              xml
              url
            }
          }
        }
      }
    }
  }
  
  ```
  
  - can't do an update while the provider is enabled, need to disable it, make your changes, then re-test and re-enable it once it's all working
  
  