For the wireless side the ASE has a pretty good walkthrough.
https://ase.arubanetworks.com/solutions/id/161
Does the captive portal happen if you try to go to another non-https site on
Apple while connected?
If so, there's a check box for Apple Captive-portal Network Assistant by-pass
that
Hi Rong,
Because Onboarding has Layer 3, you need to have an IP address on the VLAN
on/of the controller so that the user device can redirect from the controller
to Clearpass. Perhaps you’ve already got this since you mentioned Chrome
works, but it’s something to check. This one bit us.
We are in the process of implementing Aruba Clearpass Onboarding on our
campus wired and wireless network. When testing onboarding on Macbook, I
didn't have success redirecting Safari to the onboarding page. Chrome can
automatically redirect without any problem. I tried with Safari version
13.1.2
