Thank you for your patience here, I was able to review your set up with a couple different XIQ engineers but we can't find anything that could be causing that error, your set up looks perfect to us. If possible, it would be best to open a case at this point just so we can keep all of our data and notes in one place. If you can't open a case, I'm happy to continue working with you in the community, it's just not as streamlined of a process as it would be with a case.
Whether we move forward with a case or via this thread, the next thing we'll want to get is some tech data with auth debugs enabled to see if we can get any further details on the failure. This guide reviews
how to enable auth debugs, and this guide reviews
how to pull tech data. Once you've enabled the auth debugs, try to replicate the issue again, and then immediately pull tech data from the AP so we can see the connection failure in the logs. If you could also let us know the MAC address of the client device used to replicate the issue, that will help us narrow down the log lines we need to focus on. If you can open case, let's go ahead and attached the tech data to the case. If not, please feel free to send it over to me at community@extrementworks.com.
There are also some small tricks we can try in XIQ if you want. These may fix the issue faster, but it won't help us narrow down the root cause of the issue, just so you know all the options here. You could try rebuilding the SSID from scratch; since we can't find an issue with the configuration itself, it's possible one of the objects we're working with got corrupted and is throwing an incorrect error. We could also try creating a new user group, and using local DB storage as a test, to see if the issue is with the Cloud DB storage you were using originally. This wouldn't have to be a permanent setting, but if the local DB setting works that helps narrow down the issue significantly.
If you'd like to set up a call time with me so we can build the new PPSK SSID over a screen share session, just so you have a second pair of eyes, I'd be happy to set up a call, just let me know. You'll get better help from a case, I haven't been a support technician for a few years now, but I'm happy to help wherever I can.
