Symptom
User is redirected again after successful BYOD registration on 1st attempt. Second attempt is also success and the user can access external webpages (no more registration). Sometimes an error is seen after the provisioning but not easily reproducible.
This happens with iPads. The pattern is always 010101010 0=fail and 1=success
There is a success message in browser, but user gets redirected again when he enters "apple.com". In the second attempt the same success page is seen but apple.com page is displayed as it should be.
User never cancels the flow and always waits more than 10 seconds (average time 30 seconds)
Windows PC - failures are more rare usually (1 in 5 or so ) but sometimes it is failing every second attempt.
It is failing with internal CA too.
Workaround
see whether "Enable if target network is hidden" is checked in their native supplicant profile? If it is, please uncheck and save the profile. If it is not checked, try to check and uncheck , then save. Basically, we want to make sure the flag is set to false. Try the flow again and see whether it works.
Can also try remove the old NSP and install the new NSP