SSL VPN profile for windows, MAC , android or Iphone

Hi Team,

I have a requirement from my existing customer.

1. Different SSL VPN profiles for windows / MAC / Iphone

2. different client certificate for vendor / partner users.

3. different policy for windows, mac and iphone users.

4. Enterprises users will use LDAP authentication and vendors/ partner will use radius. How can we segregate those authentication repositories. If an user "user1" available on both  LDAP and radius, then how the fortigate manage to authenticate. 

ALl users will use forticlient.

Regards / Ramesh M