I would start here:
May 30 21:00:06 grover1-prod sshd[87570]: pam_sss(sshd:account): Access denied for user
blahblahusername: 4 (System error)
However, you might want to set 'debug_level = 9' instead. After reproducing and
getting the same error from the system's logs, grep the SSSD domain log
(/var/log/sssd/sssd_domain.com) for the time stamp of the System Error message.