BYOD on WLAN with Cisco WLC

We have IT employees connecting to WLAN using their laptops and we want to give them access to internal servers. So what is the best way to achieve. We have Cisco WLC 5508 We also want the employees to authenticate before gaining access to resources