anchor.diff:  
   ### Export the token signing certificate
   
  -From the `Service` section of the `AD FS` console tree, select the `Certificates` subsection
  +From the `Service` section of the `ADFS` console tree, select the `Certificates` subsection
   
   1.  Click on the certificate listed under the heading `Token-signing`
   2.  In the `CN=ADFS Signing` section of the `Actions` sidebar, click `View Certificate...`
  
positive.code: 
  ### Email the Buildkite team
  
  To complete your SSO setup, the Buildkite team needs some information from your AD FS server. 
  
  Email support@buildkite.com with the following SSO and AD FS information:
  
  <table>
      <tr>
          <td>Domain name</td>
          <td>
            The domain you use with AD FS for which you want to enable SSO. This must match one of the emails you have verified with your Buildkite account.
          </td>
      </tr>
      <tr>
          <td>organization slug</td>
          <td>
            The Buildkite organization for which you want to enable SSO.  
          </td>
  
negative.code: # SAML with Active Directory Federation Services (ADFS)
  
  ADFS can be used as single sign-on to log in to your Buildkite organization.
  
  Setting up ADFS requires organization administrator privileges on your ADFS server and in Buildkite. You'll also need to know the slug of the Buildkite organization for which you'd like to enable SSO.
  
  Self-service SSO provisioning in Buildkite is available via our GraphQL explorer. For further information, see the [GraphQL SSO Setup Guide](/docs/tutorials/graphql-sso). 
  
  ## Setup in the ADFS management console
  
  <div class="Docs__note">
  <p class="Docs__note__heading">Before starting your ADFS setup</p>
  <p>Email the Buildkite team at support@buildkite.com to request your unique SAML service URL, you will need this when setting up your ADFS relying party trust..</p>
  </div>
  
  The instructions below will guide you through using a series of wizards to:
  