@NolanHerring I believe the issue is that a corporate device is configured with a particular SSID, but the user chooses another one as they think it is 'better'. We get it all the time where we have to allow users to add SSIDs to their laptops and phones, so they can connect at home etc. and find that they have connected to incorrect ones at work (public or employee byo) and then wonder why nothing works as expected...
The only pure MR way I think you can do this is with iPSK where you have a mac address and password for each known device, forcing them to the given VLAN.
If my answer solves your problem please click Accept as Solution so others can benefit from it.