anchor.diff:  If the SAML realm is configured accordingly and the IdP supports it (see <<saml-logout>>), this request will trigger a SAML
   SP-initiated Single Logout. In this case, the response will include a `redirect`
   parameter indicating where the user needs to be redirected at the IdP in order to complete the logout.
  -. Alternatively, the IdP might initiate the Single Logout flow at some point. In order to handle this, 
  +. Alternatively, the IdP might initiate the Single Logout flow at some point. In order to handle this,
   the Logout URL (`sp.logout`) needs to be handled by the custom web app. The query part of the URL that the
   user will be redirected to will contain a SAML Logout request and this query part needs to be relayed to {es}
  -using the <<security-api-saml-invalidate,SAML invalidate API>> 
  +using the <<security-api-saml-invalidate,SAML invalidate API>>
   +
   [source,console]
   --------------------------------------------------
  
positive.code: The Elastic Stack supports the SAML 2.0 _Web Browser SSO_ and the SAML
  2.0 _Single Logout_ profiles and can integrate with any Identity Provider (IdP)
  that supports at least the SAML 2.0 _Web Browser SSO Profile_.
  It has been tested with a number of popular IdP implementations.
  
  This guide assumes that you have an existing IdP and wish to add {kib} as a
  Service Provider.
  
negative.code: . Handle the response from `/_security/saml/prepare`. The response from {es} will contain 3 parameters:
    `redirect`, `realm` and `id`. The custom web application would need to store the value for `id`
   in the user's session (client side in a cookie or server side if session information is
  persisted this way). It must also redirect the user's browser to the URL that  was returned in the
    `redirect` parameter. The `id` value should not be disregarded as it is used as a nonce in SAML in
  order to mitigate against replay attacks.
  . Handle a subsequent response from the SAML IdP. After the user is successfully authenticated with the
  