As @Marcus Hunold mentioned, you need to check what authentication protocol you configured. If you only see the MAC addresses instead of the actual usernames, or, the machine names (depends on your configuration) it would suggest that the endpoints are not doing dot1x, or maybe they are not matching the right policy on ISE. Essentially, the endpoints need to be configured with dot1x, and depends on your environment, you might be using EAP-TLS (auth with certs) or EAP-PEAP (auth with username and password). Then the WLC needs to be configured to point to ISE in terms of RADIUS authentication and accounting, there are other settings that need to be configured such as ISE NAC, but that depends on which WLC controller you are using. Finally, you need to configure ISE policy set to check against the machine or users certificates (depending on if you want to use the machines or users certificates for authentication), and that is done via the certificate authentication profile on ISE, you also need ISE to be configured to check against the AD the CN or DNS value parsed from the certificates. If you will be using EAP-PEAP, you just need to point ISE authentication policy rule to your AD, and then define the authorization policy with the access level you want to grant to the users/machines. If you still need support on this, please share your sanitized ISE configuration for review.
