Additional authorization via wifi?

Question

WiFi

there are access points unifi ap ac lite on the territory of the office; if there are ways to fasten additional authorization to connect to corporate wifi?
Do not offer Radius, as employees use regular phones/tablets;
Filtering by mac address is a good idea, but for small networks
Unifi is used in tandem with a mikrotik router, other equipment from ubiquitu is not used
Flexible options are welcome, because you don’t want to run to each device and remove information from them