SA is a service account, it is used for service to service communication. Each service account registered in the system and has its own SA user. When service make requests to the system, it uses its SA user.
USER is a regular user, it is used for human interaction.
Users has two types: USER and SA.