Infranet Controller (IC) as an external captive-portal server

 You can define a user role firewall policy to redirect an unauthenticated user to a captive portal on the Access Control Service for sign-in.