On the server add the following line:
aaa authorization network VPN_GROUP local
crypto map OPTIQUE_MAP isakmp authorization list VPN_GROUP
You haven't defined how the ISAKMP process is going to be authorized. It is always done locally, but you have to define it. See how you go with that.