This really could be a multitude of issues:
Being as you are on ise 2.2 there have been quite a few fixes that addressed this:
You will most likely want to see the Live Logs report for the authentication attempt: If this does not garner additional information to guide you to a fix you will want to generate a support bundle and get to tac:
How many Network Devices and endpoints do you have in your enviornment?