World of EUC

I don't run it the same way but I have azure nps with swyvel radius running in parallel with nfactor.  the user has to enter his user name and he is then thrown into one form or another based on the ad group

Spot on, thats what i want to do. Thanks Manuel:+1:

I have done something similar in my current environment had to have Mobilepass which used dual auth screen ldap+radius then our new solution OKTA  on the same GW Vserver so i used nfactor used a username only login schema as first factor that did a group extraction then based off group membership users would be passed to matching next factor with the advanced auth polices/login schema

i did a blog slightly different but same concept <https://c4rm0.wordpress.com/netscaler-nfactor-authentication/>