StrongSwan can use RADIUS as an authentication backend. In case the RADIUS service also returns group membership information it becomes possible for the IKE server to also choose the VPN configuration based on the membership information.