I have configured our new 9800-CL WLCs per Cisco's configuration guide for Flexconnect. Everything is working well however I have an issue (only in Flexconnect mode) where I can authenticate via the ISE guest portal but iPhones fail to connect on the first shot. The WLC shows "Web Auth Pending" however if I simply select the SSID again, it connects without requiring me to put creds in again. In Local mode, I get the auth success page and a "Done button" appears that I click and am on the network. In Flexconnect I get the auth success page but no "Done button". Anyone else experience this? I have thrown everything but the kitchen sink at this point.