by default Captive Portal only triggers for unidentified users
you can't enable HIP profiles for Captive portal, HIP is only supported on GlobalProtect
I'd suggest you focus on one aspect at a time and add more features as you make sure the previous feature works as expected
start by setting up captive portal
this should spawn a login page for everyone
next, set up captive portal GlobalProtect and have these users simply be identified, to ensure your GP users are properly identified and everyone else gets served a captive portal login page
next, add hip checks to ensure your GP users have the appropriate software installed and running
this step by step will considerably simplify your efforts to make things work as expected
::edited::
... View more