If users need to directly access network resources after being authenticated by a RADIUS server, you can configure RADIUS SSO to trigger authentication.to implement RADIUS SSO, the FW needs to analyze the RADIUS accounting packets between the Network Access Server (NAS) and the RADIUS server to obtain the mapping between users and IP addresses
see datails
https://support.huawei.com/hedex/hdx.do?docid=EDOC1100068394&id=sec_admin_userauth_0076&text=CLI%25253A%252520Example%252520for%252520Configuring%252520RADIUS%252520SSO%252520for%252520Internet%252520Access%252520Users&lang=en