APM SSO Between NTLM and Forms Based

Redirect from APP3 to APP1 is facilitated by an iRule attached to APP3 VIP that checks for existing APM session. If no active session is found, redirect to APP1 virtual takes place. APP3 is using "SSO" type access policy profile.  This type of profile does not have any front end elements but instead, it gets access to existing APM session and is able to pass existing APM session variables to another application. Also to mention, SSO between access policies is done using single authentication domain "mycompany.com".