Centralized SAP GRC Firefighter logon does nothing after the plugin system moves to RISE with SAP, while the RFC connection test passes. The cause and the loopback destination fix from SAP KBA 2314735.
A consultant's guide to SAP GRC Access Control: the ARA, ARM, BRM and EAM components, how they fit together, common implementation pitfalls, and when a full GRC deployment is justified versus a lighter alternative.
SAP Notes 3318926 and 3318927: the real prerequisite for SP21 Firefighter sessions, the follow-on notes you need, and fixes for locked IDs and short dumps.
SAP GRC Firefighter and Emergency Access Management (EAM) best practices: what the Firefighter ID, role, owner and controller do, how to scope roles, what auditors test.