A retail company deploys wireless guest access on a Cisco WLC integrated with Cisco ISE. Guests must be redirected to a customized ISE-hosted portal where they authenticate, and the guest session policy must be centrally controlled and consistent across all controllers. The security team wants ISE to serve the portal and make the authorization decision. Which Web Authentication method should be configured to meet these requirements?