We are using Radius on an Active Directory system. The only way I can get external authentication to work for admins in to check the unencryped PAP as an option in the NPS settings. Is this the only way to setup Radius admin authentication on an IAP?