I have setup a SSID with social media login with Ruckus unleashed.
When the authentication page is open to select the social login. clients are able to access internet using another tab or browser. even they can do a google search and select the link without authenticating.
Also they get the IP address which can ping or access all the other internal resources without authenticating.