Thanks for the response. I am not entirely sure we are quite on the same page.
Firstly, yes, that is the Tech Note I have worked from. Taking the chart on page 24 as a reference, I am getting as far as step 6. The "response-code" in the XML coming back from the Zone Director is consistently a 202 if I use AD or Radius as the Authentication Server in the HotSpot configuration; if I use Local Database I can get a successful 201 but this is obviously not much help (beyond establishing that my server-side code is working). I get the same response when I use a request generating tool such as "PostMan", so I know I am sending the XML to the ZoneDirector correctly and I am getting valid XML back. I just don't understand why credentials known to be good (and tested in the AAA config page) are producing the 'Authentication Pending' response.
Am I missing a crucial point in your response (or in the tech note) or did I not make clear in my original post just how far I am getting? I would appreciate any further help you might be able to offer.