After user authentication is successful.
It hits BYOD-Provision service and user will get provision role
On controller side, I set rule as captive portal. Page will be redirect to provision device portal. I enter username and password. Authentication is successful. User hit BYOD-Pre auth service. no any radiusattribute return to user because I used default profile.