In a WLC 4402 firmware v.5.2.157 is there any way to assign users to a VLAN dynamically based on the RADIUS response received from the ACS?
Yes and no. you can do this for an internal 802.1x WLAN, as the client does not get an IP address until they have completed the authentication process. For this you use 64/65/81, 64 802 , 65 VLAN and for 81 use the interface name not the VLAN number. you will also need to make sure you have AAA Overrided enabled under the WLAN.
If as this says for Web Authentication, the answer is no. The client has an IP address prior to being validated by the AAA server.