To give you a quick overview, Client Classification Policy can assign different policies for different clients/devices.
Probably the easiest way is to give you an example:
I am using it for a classic BYOD solution - to separate corporate devices and non-corporate devices having only one SSID
When you connect a device to the network, Access Point determines to which vlan assign the device: - if it's a corporate device (joined to the windows domain) - vlan 2 and full access - if non-corporate (non-domain PC) - vlan 3 and internet access only
But you can be even more specific: - if a cisco phone - vlan 4 and qos applied - if a samsung phone - vlan 5 and access to company intranet - if ipad - vlan 5 and block skype on Friday...