@pio.gra - it sounds like you want ISE to return a VLAN Name (or VLAN ID) based on some logic/identifier about where there request came from. In my experience, that is better handled by the switch itself, based on local knowledge. If you need to return a VLAN to a switch interface, then ISE should not contain this logic - ISE should return a VLAN Name (and not a VLAN ID) and the switch has the mapping of VLAN Name -> VLAN ID. e.g. in large buildings where each floor has its own Voice VLAN and Data VLAN, ISE should return a Name each time - and the switch on each Floor must have the appropriate VLAN ID. This works.
And as @ahollifield says, dynamic VLAN ID assignment can be tricky - for 802.1X the VLAN assignment happens BEFORE the DHCP - that's fine. But if you're doing dynamic VLAN assignment for endpoints AFTER the DHCP stage, then you can have issues, because the host won't know to do another DHCP after the VLAN has been changed. How would it know? Be careful.
