In the controller you need to select
WPA2 / PSK AES
You need to the following to the aaa profile :
Mac auth profile (under authentication > Layer 2 auth > Mac auth profile )
802.1x auth profile (under authentication > Layer 2 auth > psk profile)
Mac auth server group (select the internal controller or external servers)
Get Outlook for iOS