AD group control on Activesync and outlook anywhere access

Saw this: https://devcentral.f5.com/questions/checking-group-when-doing-apm-for-activesync

 

And also checked out the latest iapp but it only applies AD group control to ECP which is a bit different as it works as a website.

 

I need this only for activesync and outlook anywhere which obviously dont use a form to auth, they should use basic auth then check the users group and deny if not in certain group. Can anyone help?