now that we create an SFA auth to hold the sfa entities involved: