Just to update of gateway configuration page, I've created a state machine diagram showing arm/disarm cycle.Also here is an example of my own groups (Garage, House) and zones (PIR, reed) setting for ground floor.
You can see here how authentication unit is attached to particular zone. Only
these zone is then set up with authentication delay. That is, when someone
trips these zones there is time allowed for the person to authenticate.
All other zones in house group trigger the alarm state immediately. You can
read more about it in zone's setting.