RADIUS server multiple groups (SSL VPN)

Hello,

I configured the RADIUS server with Duo, for 2FA in SSL VPN. The configuration works correctly, I can log in successfully.

I'd like to know though if I can create multiple ssl vpn groups, different.

If the AD group is specific to the Group Name, authentication fails.

How can I specify a specific group of active directories within the radius group on the fortigate?

Where can I find logs related to authentication via radius?

Thank you

Regards

Alessio