Have you enabled CNA bypass or used ACLs to whitelist URLs that android use to test internetn connectivity? If any of these has been configured, this is the expected behavior. User will have to open a browser, type a URL to get redirected to the ClearPass guest portal.