Got it...so...in the Configuration --> Start here screen, click RADIUS Enforcement Generic towards the bottom of the list.
For the services tab, here is my output:
Then, on the Authentication Tab, here is a screen shot:
You can add AD as the auth source here.
Finally, on the Enforcement Tab (skip Roles), choose the one called Sample Allow Access Policy.