APM AD auth and multi-domain forest

Thanks for sharing the solution Josh!

I was wondering if there could be a way to somehow script the VPE Access Policy to only have single branch for the Logon Page --> AD Auth --> ... but to somehow dynamically set the AAA AD server to be used on the AD Auth box based on a pre-defined list of which domain uses which AD Server (actually this info is already defined on the AD AAA server definitions). This way there would be a single AD Auth box on the VPE so it would simplify a lot the policy as you don't have to have own branches for every AD server.

-Turo