If a WiFi agent is not able to associate to the WiFi network, first make sure that the Ethernet interface is connected to the network and that the agent is reporting to the dashboard.
Example of a wifi agent connected to the dashboard but not associated with any WiFi network.
Then, you can check via the console the content of the WPA supplicant log file by following this procedure:
Go to the Agents tab
Click on the WiFi agent that can't associate to the WiFi network
Click on the Console tab within the Agent detailed view
Type the following command: tail -n 50 /tmp/wpa_supplicant.log
See what's the error reported by the WPA supplicant process.
In cases where a new WiFi profile was just applied to the agent, it's always good to reboot once the agent.