When setting up a Cisco WLC with Purple WiFi it's important to allow traffic to and from our Radius servers (click here for the full list) inbound and outbound using UDP on the clients Firewall, if this isn't completed then the authentication wont complete correctly.
Support