Hi ,
Welcome to our new Microsoft Q&A Platform.
You could setup NPS for RADIUS authentication in Active Directory.
When a VPN connection starts, the client is authenticated through the RADIUS server checking the Active Directory group membership and granting the network access.
For your reference:
https://nolabnoparty.com/en/setup-nps-for-radius-authentication-in-active-directory/
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
https://learn.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-top
Best Regards,
Candy