We found that the documentation does not mention that you must create a user Relm and assign the newly created Authentication Server to that Relm. This is something we would do as a typical setup however not many of us want to tinker with production until we know it works. Using the "Test Authentication" option within Azure failed until this step was completed. Let me know if this works for you.
... View more