Here is a link to one option: https://kc.mcafee.com/corporate/index?page=content&id=KB55032 It can also be done by adding the EM to the domain and utilizing the native ISS capabilities, but this is not a preferred method and there would be other changes required. I do not see a KB written for that as of yet, but support I believe is reviewing it. The radius solution I linked to, is fully supported and tested.
Hope this helps,
I configured my MVM exactly like in KB and everything works well.
Thank You very much for Your help.