I just was on a call with support and they had me put the vlans in a list in the CloudPath cert template like in the attached screenshot.
These are the two vlans that are in the pool assigned to the StaffBYOD user role. The Filter ID is what I use to map to the user role in SZ100. This user role has a traffic profile and vlan pool assigned to it and the traffic profile is being applied just not the vlan pool. After adding this in Cloudpath it looks to me like all devices are getting an IP from vlan 730. I have two other cert templates that use a different FilterID/User Role and they correctly apply the vlan pool without having to specify anything in Cloudpath for vlan ID. I asked why those worked and this one doesn't but didn't get an answer. I don't think the answer I got from support of adding the vlans in a list like this above is the answer. Any ideas?