I have ran into situations where a device had a previous successful authentication and the controller "remembered" the device. I had to manually kick the client for the network. After that it worked normally.
Like Cappalli mentioned you will need to configure these parameters so the controller will know how to process the request and where to look for the entry.
The Server group configuration:
The MAC profile configuration:
After creating these you can apply them to your AAA profile: