Avoid overwriting services and domain sections of system with an existing sssd.conf (IPA client for example). Copy the services section used in sssd.conf, and append 'proxy' to existing domain section.