Access to Specific Servers through Policy Sync Fails with error "Certificate does not contain an authorized principal"

User has been setup correctly through policy sync but unable to access the server. Following error is noticed on the server when login fails: 

error: Certificate does not contain an authorized principal

• Okta Advanced Server Access
• Policy Sync

Okta ASA server agent unable to update /etc/ssh/sshd_config file with AuthorizedPrincipalsFile directive. It is required for PolicySync to work. It can happen if sshd_config does not have write permissions OR if the ASA server tools version is lower than 1.52. 

Make sure the server tools version is not lower than 1.52. It is recommended to install the latest version of server tools on the target server.

Also, check if /etc/ssh/sshd_config has write permissions and has the following directive set: 
 

AuthorizedPrincipalsFile "%h/.asa_authorized_principals"

Note: The value of the directive can be different if it has been set through sftd.yaml. More information can be found here.