Hello,
Mac-based Vlans are old and vendor specific and even not 100% secure. It's better to look at new standard mechanisms like 802.1x. With a 802.1x client and a radius server you can easily drop a authenticated client in the right vlan which is a attribute in Radius.
We also have (near) future plans to do Mac-based authentication in the 5300 platform. A incoming mac adres on a port is authenticated against a radius server using the 802.1x mechanism.
Hopefully this helps.