Enterprise authentication (e.g., WPA2-Enterprise or WPA3-Enterprise) requires users to provide credentials - typically via a RADIUS server - before gaining access to the wireless network. This is the most secure and appropriate method for controlling access based on individual credentials, especially in environments with external users.
A captive portal is usually used for guest access and may allow access with just a click-through or simple form, which may not meet strict credential requirements.