Symptom
Client assigned to the wrong VLAN ==> the one mapped on the anchor WLAN
They should be assigned the one override with ISE while doing iPSK
Workaround
if possible map the WLAN on the anchor WLC to the desired VLAN
Further Problem Description
If we have a clear connection (deleting the client from both WLCs) the client is put on the right VLAN
Then if the client tries to associate again, the client is mapped to VLAN Y ? which is the interface mapped on the AireOS WLAN configuration
Looking at the traces. The 9800 fails to send an access request to ISE, therefore the client is just moved to the VLAN mapped on the SSID.