anchor.diff:  
   ### Step 1
   
  -The first step in setting up a SAML-based provider is to use the `ssoProviderCreate` mutation to create a new provider in Buildkite and retrieve the details you’ll need for your SSO provider’s system.
  +The first step in setting up a SAML-based provider is to use the `ssoProviderCreate` mutation to create a new provider in Buildkite. This mutation will return the details you’ll need for your SSO provider’s system.
  +
  +The `emailDomainVerificationAddress` requires the same domain as `emailDomain`, and must be one of `admin@`, `administrator@`, `postmaster@`, or `webmaster@`.
   
   ```graphql
   mutation CreateProvider {
  
positive.code: }
  ```
  
  ### Step 2
  
  The second step is to use the `url` that was returned above to perform a test login. Open the `url` in a browser, and perform a test login via G Suite.
  
negative.code:     emailDomainVerificationAddress: "admin@myorg.com"
    }) {
      ssoProvider {
        id
        state
        ... on SSOProviderSAML {
          serviceProvider {
  