anchor.diff:  
   <%= image "custom-saml-settings.png", width: 1746/2, height: 926/2, alt: "Screenshot of the Buildkite Custom SAML Settings Page" %>
   
  -If you already have an SSO Provider, select it from the list of Configured SSO Providers. Click the 'Edit Settings' button, and choose an option for entering your meta-data:
  -
  -
  -
  -## Option B - Create a new SSO Provider
  -
  -Click the Buildkite Organization Settings' Single Sign On menu item, then choose the Custom SAML provider from the available options:
  -
  -<%= image "sso-settings.png", width: 1458/2, height: 926/2, alt: "Screenshot of the Buildkite SSO Settings Page" %>
  -
  -Choose how you'd like to configure your Custom SAML Provider:
  -
  -
  -
  -## Step 3. Perform a Test Login
  +After completing your chosen option, [Perform a test login](#perform-a-test-login), then [Enable the new SSO provider](#enable-the-new-sso-provider).
  +
  +## Perform a test login
   
   Follow the instructions to perform a test login. Performing a test login will verify that SSO is working correctly before you activate it for your organization members.
   
  -## Step 4. Enable the new SSO Provider
  +## Enable the new SSO provider
   
   Once you've performed a test login you can enable your provider. Activating SSO will not force a log out of existing users, but will cause all new or expired sessions to authorize through your provider before organization data can be accessed.
   
  
positive.code: 
  Choose the 'Provide IdP Metadata Later' option when configuring your Custom SAML Provider:
  
  On the following screen you'll find the meta-data URL in the Service Provider section:
  
  <%= image "service-provider-urls.png", width: 1768/2, height: 412/2, alt: "Screenshot of the Service Provider section in the Custom SAML SSO Provider details page" %>
  
  The custom endpoint contains all the information you need to set up SAML with any provider.
  
  After completing your IdP setup, you'll need to complete your Buildkite SSO Proivder's configuration. Proceed to [Step 2. Option A - Update your SSO Provider in Buildkite](#option-a-update-your-existing-sso-provider).
  
  ## Option B - Setting up your IdP manually
  
  Manual setup is different for each provider, however it usually requires the following fields:
  
  
negative.code: 
  <%= toc %>
  
  There are two workflows for setting up a new SAML provider depending on your Idp's setup process: If you require an ACS URL from Buildkite to complete your IdP's setup, or if you can complete the setup without anything from Buildkite.  
  
  <div class="Docs__note">
    <p>You can also set up SSO providers manually with GraphQL. See the <a href="/docs/integrations/sso/sso-setup-with-graphql">SSO Setup with GraphQL Guide</a> for detailed instructions and code samples.</p>
  </div>
  
  ## Set up with an ACS URL
  
  If your IdP requires information from Buildkite as part of the setup process, you can generate your unique Buildkite URLs first and enter the rest of your IdP information later. 
  
  ### Get your ACS URL and configure your IdP
  
  Click the Buildkite Organization Settings' Single Sign On menu item, then choose the Custom SAML provider from the available options:
  
  