ActiveSync and Multi Domain SSO issue

I tried the second option without success.

I think that's an issue with the returning traffic, there's to many paths going back and forth. I also included a SNAT so traffic passing through the External VIP could return, but it didn't help.

The first option seems more interesting anyway. Is it possible to change to assign a Access Policy based on an URI? If I could "select" the Access Policy accordingly to my URI, I think it would solve this issue. An iRule, if URI equals "microsoft-server-activesync" then use Access Policy "basic_access_policy" else use Access Policy "Multi-Domain-SSO". Something like that.

Thanks,

Pedro