APM - AD domain session variable reset after failed logon?

I'm having the same issue even with the workaround using Macro (per: https://support.f5.com/csp/article/K48343296). I even took OUT the loop and just added manual 3 authentication macro boxes. Same behavior - if user enters incorrect password 1st time, and then correct password 2nd time - the system doesn't let the user login until session is over.

HOW is this "by design" ? In any case - anyone successfully used Macro's in their environment to bypass this limitation? (11.6).