You must define the username on the firewall also as an admin user along with having the username on the Radius server.
Thanks for the quick reply - sliedl. We hve everything configured correctly. It works, but only if you remember to select the correct "Authenticator"! This was an operator error. I am only admitting to it because someone else might overlook this also (i hope).