Check that the client doesn't have an old password saved, that they selected the right SSID, that they were entering the password correctly, and that the password was configured as expected. If all the details provided are correct, the client can still fail during the packet exchange required for a successful authentication.
This what shows in the event logs.