Yepp, It works for me now with a little compromise. You should configure a local user (on Ruckus) with a realm (eg.: tacacs) and a group (eg.: ReadWrite). Attached a screens. If these settings are ok then you should configure a TACACS Dictionary on CPPM with the realm name. (eg.: tacacs:ip) You can see on the attached pic. Then you should to create enforcement profile. It works well but without the user-name option doesn't work.
I would like to handle the user-name dinamically, but it doesn't work with a variable like %{Authentication:Username}
Has anyone information regarding this? Does ClearPass able to handle variables in TACACS Enforcement Profile attributes?
(Hope it helps)