Update entra-id-saml.mdx

fix step

Author: clairekinde11

src/content/docs/authenticate/enterprise-connections/entra-id-saml.mdx

@@ -62,16 +62,17 @@ You can make a connection available only to a specific organization, or you can
 3. Scroll past the IdP metadata URL and other key attribute fields. We will add this information later. 
 4. Enter an **Email key attribute**. This is the attribute in the SAML token that contains the user’s email. Setting this value ensures that the email address returned in the SAML response is correctly retrieved. We do not recommend leaving this field blank, but if you do we will set ‘email’ as the attribute.
 5. (Optional) Add a first name and last name attribute.
-6. Enter **Home realm domains**. This speeds up the sign in process for users of those domains.
+6. Enter a **sign in URL** if your IdP requires a specific URL.
+7. Enter **Home realm domains**. This speeds up the sign in process for users of those domains.
    Note that all home realm domains must be unique across all connections in an environment. For more information about how, see [Home realm domains or IdP discovery](/authenticate/enterprise-connections/home-realm-discovery/).
 
    ![SAML configuration screen](https://imagedelivery.net/skPPZTHzSlcslvHjesZQcQ/79c7b045-d391-47a0-ee77-a2c3cbb78c00/public)
 
-7. If you use home realm domains, the sign in button is hidden on the auth screen by default. To show the SSO button, select the **Always show sign-in button** option. 
-8. Copy the ACS URL, you will need this for the SAML provider app.
-7. If you want to enable just-in-time (JIT) provisioning, select the **Create a user record in Kinde** option. This saves time adding users manually or via API later.
-9. Select if you want to treat this connection as a trusted provider. A [trusted provider](/authenticate/about-auth/identity-and-verification/) is one that guarantees the email they issue is verified. We recommend leaving this off for maximum security.
-10. Select **Save**.
+8. If you use home realm domains, the sign in button is hidden on the auth screen by default. To show the SSO button, select the **Always show sign-in button** option. 
+9. Copy the ACS URL, you will need this for the SAML provider app.
+10. If you want to enable just-in-time (JIT) provisioning, select the **Create a user record in Kinde** option. This saves time adding users manually or via API later.
+11. Select if you want to treat this connection as a trusted provider. A [trusted provider](/authenticate/about-auth/identity-and-verification/) is one that guarantees the email they issue is verified. We recommend leaving this off for maximum security.
+12. Select **Save**.
 
 ## Step 3: Create and configure an Entra ID enterprise application