Finally got the RADIUS server (RSA AM 8.1) to pass the RADIUS.25 attribute back to the RADIUS client (Cisco ASA 5510).  Here's what I did in hope that this will help others who run into this issue.  On the RSA AM server;Create RADIUS profile -RADIUS ...

Thank you both for the quick and helpful replies.  Yes, this is definitely a RSA server config issue.  I was unaware of the "authentication settings" for the individual users.  I am now able to pass RADIUS attributes back to the Cisco ASA RADIUS clie...

 I have a similar setup to dexterism which I can't quite get working yet.  I'm would like to use the RSA AM user database and built-in RADIUS server to pass back the group-lock attribute back to the RADIUS client (Cisco ASA 5510).  I've created my ow...