3GPP 24.501 v20.0.0 — the document's own text
8.3.3.7 Service-level-AA container
Taught in 4. Inside TS 24.501, the document at the centre (CT1 — the group that writes what your phone says, overview).
The network shall include this IE if the service-level authentication and authorization procedure has completed unsuccessfully and the 5GSM cause is #29 "user authentication or authorization failed". The network shall include the service-level-AA response if provided by the DN in the service-level-AA container.