We found servers in our logs that were not in our server configuration.
Further investigation determined that GlobalPOPs had added additional radius servers but had not informed us. Requests coming from new servers not in our configuration were rejected causing authentication failures.
I obtained a complete list of their radius servers, added it to our clients.conf file and now authentication is functioning again.