np... just say that when you start next time

We're happy to help out.
an SA a.k.a system access key is an 'intercom' key. In most cases you would only do this on a system that is configured as 'pbx', and most access (calls in/out) are done from those 'intercom' keys (you dial '9' to get out, etc).
And you're assigning the AuthCode to the phone that you want to be forwarded, right? (the one in the ceiling?) By putting the AuthCode on the 'other' extension, what should happen is that any time you invoke the Auth Code (#80-[Authorization Code]-#), you should 'become' the other station. The *33 is the forward command, 9 to access ARS, and then the destination number, and the # sign tells the system you're done.
When I do it from DISA, after I enter the Auth Code, I do *33 (dialtone) extension-to-forward (dialtone) 9 -outsidenumber #. So, for example, *33 (pause) 2121 (pause) 9 - 1 -215.555.1212# would forward my extension to Directory Assistance.
Maybe try that way and see if it makes a difference.
I've actually always done it using 'DISA' (remote access), which is more complicated to set up.
When I do it for DISA, the key sequ