There are three ways to setup RADIUS authentication in Intune, one is using EAP-TLS (Certificate Authentication), another is using Your Entra ID Password with EAP-TTLS PAP, and the last one (which does not require Intune setup) is using PEAP-MSCHAPv2 Password Authentication using the RADIUS credentials created by your users (you can see how to enable self service user management using their Entra ID credentials). We recommend using EAP-TLS as it is more secure (and magical to the users) and does not require passwords.
Depending on your RADIUS setup: