Paul,
Yes, what Salman says seems to be correct.
I have noticed in your very first post that you have created all the ids: FireFighter, FireFighter ID, Controller and Owner in ERP system. Rather, as suggested by Salman. you need to create FireFighter ID ONLY in ERP (back end system) and rest of the users need to be created in GRC box.
Please check this.
Faisal