Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I faced the same challenges within ISE. Within your WLC, you can simply use a WLAN with Mac filtering and AAA override both disabled. This presents a residual wireless option.If your want to control this through ISE, I setup the following for testing...