When redirecting to an external captive portal (ECP), you can permit end users to log in with their credentials from a third-party site. ExtremeWireless builds a dynamic list of server addresses for sites by monitoring the DNS replies between DNS servers and the mobile user.
Configure an Allow filter rule that applies to all learned server addresses for a specific site.