IPSec Client Access VPN

[sprocket10]

I am creating a IPSec IKEv1 client access VPN on a ASA 5516x to allow clients to VPN in using the native Windows 10 vpn.

I have created the profile which works perfectly with local user authentication, but if I switch it across to the Radius profile I am getting the error "The remote connection was denied because the user name and password combination you provided is not recognized, or the selected authentication protocol is not permitted on the remote access server".

The radius server is showing no errors or logs, and the radius profile is working with clients using the Anyconnect software.

The Windows 10 profile is set to use MS-Chap v2 on the security tab.

What is preventing the radius server from working on the IPSec connection.

[sprocket10]

Update

After enabling password management I am getting errors on the NPS server logs.

If I do a test authentication in the Radius on the ASA I get a successful authentication, but when trying on the VPN I get a logged error on the NPS for Unknown user name or bad password.

Why is the VPN failing to authenticate with exactly the same credentials?