3GPP 24.501 v20.0.0 — the document's own text

5.5.4.5 UE-initiated authentication and key agreement procedure not accepted by the network

Taught in 4. Inside TS 24.501, the document at the centre (CT1 — the group that writes what your phone says, overview).

If the UE-initiated authentication and key agreement procedure is not accepted by the network, the AMF shall:

create a RELAY KEY REJECT message;
set the PRTI IE of the RELAY KEY REJECT message to the PRTI value of the received RELAY KEY REQUEST message if the network decides to reject the RELAY KEY REQUEST message; or

NOTE: The network decides to reject the RELAY KEY REQUEST message when e.g. the CP-PRUK is not found in the network.

set the PRTI IE of the RELAY KEY REJECT message to the PRTI value of the received RELAY AUTHENTICATION RESPONSE message and include the EAP message IE set with EAP-failure message if the AMF receives an EAP-failure message from the AUSF; and

send the RELAY KEY REJECT message to the UE.

Upon receiving the RELAY KEY REJECT message, the UE shall consider the authentication has failed and perform the PC5 signalling protocol procedure as specified in clause 7.2.2.5 of 3GPP 24.554 [19E].