Have you got an idea of how to configure with ACS Radius Server a dynamic attribution of VLAN-ID that will depend on the location of a particular user (supplicant)that is defined in one user group i.e.
User A -(group A) Site X --- VLAN-ID-X
User A -(group A) Site Y --- VLAN-ID-Y
I think with a beta version 4.0 18 of ACS this might be possible with such functionalities like NAF-Network Access Filters and RADIUS Authorization Components (RACs) but in the user guide it is not exactly declared how to do it and what previous configuration I should do.
If you work on this subject or already done it with a beta version 4.0 don't hesitate to share your experience.