The deployment I'm currently working on requires that all users connecting to the Onboarding SSID be immediately, automatically redirected to the captive portal. As it stands users must open a web browser and attempt to browse to any website other than the Virtual IP (and by extension hostname) of the Clearpass cluster, which is permitted as per the requisite user role in the corresponding controller.
This immediate and automatic redirect is only confirmed to work with Android devices; Apple's CNA method is presesnting entirely different problems, and is not a concern right now. Any advice would be much appreciated, thank you!