anchor.diff:  
   Set up deprovisioning in Okta: 
   
  -1. On the 'Provisioning' tab in the Okta Buildkite application, select 'Integrations' from the left side menu
  +1. On the 'Provisioning' tab in the Okta Buildkite application, select 'To App' from the left side menu
  +1. Edit the 'Provisioning to App' settings, and enable 'Create Users' and 'Deactivate Users'
  +1. Select 'Integrations' from the left side menu
   1. Enter the token and URL that you copied from your Buildkite SSO Provider
   1. Save and test your settings
   
   Return to Buildkite and your SSO Provider Settings before continuing to the next step.
  +
  +<div class="Docs__note">
  +  <p>This integration with Okta is currently under development and is not available to customers yet.</p>
  +</div>
   
   ## Step 3. Perform a Test Login
   
  
positive.code: 
  ### SCIM Deprovisioning
  
  Using the provisioning settings in Okta you can enable automatic deprovisioning of users in your Buildkite organization.
  
  After creating your SSO Provider in Buildkite, an access token and SCIM URL will be generated. 
  
  These are found in your Okta SSO Provider Settings:
  
  <%= image "okta-scim-settings.png", width: 1440/2, height: 548/2, alt: "Screenshot of the Buildkite Okta Settings SCIM Deprovisioning section" %>
  
  
negative.code: 1. Give your application a name in the 'General Settings' form
  1. In the Buildkite application in Okta, select the tab labelled 'Sign On'
  1. In the Sign On section 'Settings', click the 'Identity Provider Metadata' link and copy the URL for use in the next step
  1. In the Credential Details section, select Email for the Application username format
  1. Select the tab labelled 'Applications'
  1. Assign your user account or group to the application so that you will be able to complete a test login
  
  