Have you selected the correct encryption variant? The WIFI_ON LED does only signal that the shield is able to communicate to a Wifi network with the supplied SSID. To understand the traffic it must also be able to decrypt it. So if either the encryption variant or the passphrase is wrong you won't get more than the light from the LED.