jiyoung,
There are ACLs to be created on the WLC, Authorization Policies and Profiles on the ISE.
For a good understanding of what needs to be done to get this fully configured, go here:
http://wikicentral.cisco.com/display/VTANDGOLD/ISE+1.2
and choose the GOLDlab: ISE 1.2 - BYOD-MDM Lab on the right side for Partner Education.
If you cannot log in, your Account Manager can get you access. This is a really thorough walk-through of configuring the ISE to connect with a third-party MDM server and it lets you do all the configuration.
Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question. Otherwise, feel free to post follow-up questions.
Charles Moreton