This article describes an error that occurs in Okta Privileged Access(OPA) when executing a sft ssh command.

C:\Users\Administrator>sft ssh Target_server
Waiting on browser...
Browser step completed successfully.
dial: SSH client setup: resolving hosts: connection info: security policies do not yet support servers with bastions or issuing credentials for more than one target at a time

Connection to Target_server closed.
exit status 255

The following error message is displayed:

security policies do not yet support servers with bastions or issuing credentials for more than one target at a time

• Okta Privileged Access (OPA)
• ScaleFT (SFT)
• Okta Identity Engine (OIE)

The issue occurs because OPA does not currently support the Bastion option.

To resolve this issue, remove or comment out any Bastion options from the server configuration file.

1. Open the /etc/sft/sftd.yaml file on the SSH server.
2. Locate any lines containing Bastion options.
3. Delete or comment out these lines to disable the feature.
4. Save and close the file.
5. Restart sftd service using: 

   systemctl restart sftd