first of all debugging you should check two things:
Do your wireless controller sent the SSID as Radius TLV (this is a per WLAN Service option). Check this in you WLAN Service in the "Auth&Acct" menu for your Radius server (it's a button).
Is the correct rule NAC applied to the device and is this rule connected to the SSID?