Can't figure out how to connect to EAP XFINITY network in station mode

These are settings from my windows 10, which work just fine. Windows connects after I enter my XFINITY username and password (also shows certificate issued by COMODO RSA CA)

I can’t find a way to replicate these settings on Mikrotik device (SXTsq 5 ac)
No matter what I tried I get “802.1x authentication failed” error in the logs

Could this be because there is no PAP support in Mikrotik?
wireless properties.PNG
wireless properties 2.PNG