If the environment is small or there is no RADIUS server in production, an authentication that is built into the Cisco wireless controller can be used.
The local EAP service needs to be defined on the controller. Navigate to Security -> Local EAP -> Profiles and click the New button.
A name is required to be entered for the Local EAP profile which will be used to define the authentication server methods.
A list of local users needs to be created on the WLC for authentication, this can be done in Security -> AAA -> Local Net Users