anchor.diff:      <tr>
           <td>Login URL</td>
           <td>
  -          The URL where you can log in to your AD FS service. Usually your domain name or IP, with <code>/adfs/ls</code> appended.
  +          The URL where you can log in to your ADFS service. Usually your domain name or IP, with <code>/adfs/ls</code> appended.
           </td>
       </tr>
       <tr>
           <td>Federation Service Identifier</td>
           <td>
  -            The URL that identifies your AD FS service. Usually your domain name or IP, with <code>/adfs/services/trust</code> appended.
  +            The URL that identifies your ADFS service. Usually your domain name or IP, with <code>/adfs/services/trust</code> appended.
           </td>
       </tr>
       <tr>
  
positive.code: 1. <u>Welcome</u>: select `Claims aware`
  1. <u>Select data source</u>: select `Enter data about the relying party manually`
  1. <u>Specify display name</u>: call your relying party `Buildkite`
  1. <u>Choose profile</u>: select `AD FS profile`
  1. <u>Configure certificate</u>: skip this step, as you don't need a token encryption certificate
  1. <u>Configure URL</u>: 
  	select `Enable support for the SAML 2.0 WebSSO protocol` 
  
negative.code: 
  ### Update the authentication policy
  
  From the `Service` section of the `ADFS` console tree, select the `Authentication Methods` subsection
  
  1. Under the `Primary Authentication Methods` header, click the `Edit` link
  2. In the `Intranet` section, ensure that the `Forms Authentication` box is checked 
  