IAGAuthService and Extended authorizations for Bridge scenario

[plaban_sahoo]

Hi All,

i am unable to co-relate IAGAuthService and SAP note (3155715 - Extended authorizations for Bridge scenario - SAP for Me). Can you please suggest on the same,

And what does Extended mean in Extended Authorization for Bridge Scenario.

My understanding is As a GRC AC end-user i raise a access request which triggers a call to IAG for risk analysis. This authentication call is performed by IAG_SOD_AUTH. And then IAG_SOD_CHECK is used to call the risk/Access analysis service.

But the note says(as below screenshot) that only when the config. is done end users can do risk analysis and that too with auth? Which id is to be assigned Auth. And why does the note mentions to have IAGAuthService(is a Destination created in BTP Subaccount pointing to IAS. is not clear.

Regards

Plaban