AWS Active Directory login

[jht-prog]

I'm attempting to integrate AWS Directory Services with Keycloak radius server and I get the following. This results when using the AWS console to enable 2FA.

2022-05-11 16:45:24,683 WARN [org.keycloak.events] (pool-6-thread-3) type=LOGIN_ERROR, realmId=Radius, clientId=radius, userId=ba222699-c4a3-4765-88fc-b785bdbe2011, ipAddress=10.0.131.229, error=RADIUS ERROR, RADIUS='Login to RADIUS fail for user fakeusername, please check password and try again', RADIUS_HOST=10.0.131.229
2022-05-11 16:45:24,683 WARN [org.keycloak.events] (pool-6-thread-4) type=LOGIN_ERROR, realmId=Radius, clientId=radius, userId=ba222699-c4a3-4765-88fc-b785bdbe2011, ipAddress=10.0.87.184, error=RADIUS ERROR, RADIUS='Login to RADIUS fail for user fakeusername, please check password and try again', RADIUS_HOST=10.0.87.184

10.0.131.229 and 10.0.87.184 are two addressed associated with AWS Directory Services AD. I can log into the Keycloak console using fake username and password just fine.

Anybody ever tried this?