When setting up onguard you are going to have 2 services.
1. 802.1x (radius service)
1. OnGuard (webauth service)
You will need to have in your enforcement profile to look for posture tokens
Its not an easy process to do on your own the first time, so I always recommend that you work with your local SE or Clearpass SE.