@Latot 

Hey

I would expect this to happen.  The portal will only allow access to the controller (web portal, everything else blocked) until the user has authenticated on the portal.   Then it should release and allow internet connection

I use portal authentication on my guest network and it reports no internet on the IPads until they are authenticated

Hope this helps!