I know this is old post, but I am having exactly the same issue. See link below
How was this resolved?
I have not given up yet !!!!
When you login with the IP sec profile, do you use the certificate ? if then
1) Check do we have the same certificate on asa.
2) Change the user authentication in GP to cert because right now it is local.