At the time of this writing, Apple Mac with OS Sierra (10.12) fails BYOD onboarding process with Cisco ISE. If you updated device that was already on-boarded then you should be fine however new install will fail with an error: “Unable to download profile”.
The good news is it is being tested by Cisco and we should have a working solution soon. The update should come out in version 2.0 patch 4 (which doesn’t have a release date yet). Version 2.1 patch 1 (which has been released) does support new OS however, the SPW version also needs to be updated to 2.1.0.41 and it has not been released yet.
Bottom line, if you have Cisco ISE BYOD enforcement in place notify users with Mac OS Sierra and wait for updates from Cisco.
P.S. 11/4/2016 SPW 2.1.0.42 compatible with MacOS 10.12 (Sierra) is out and does not require ISE upgrade. Happy testing.
P.S.S. 11/19/2016 SPW deployed and successfully tested without any issues.