When users connect they get directed to the portal to select a plan, however once a plan is selected they get put into a redirect loop where the portal sends them to the Mikrotik, then the Mikrotik sends them to the portal.
It appears that RADIUS is working and the mac address is present on the client in the admin area.