Configure authentication policy for list of users authenticated with ACS

I am new to APM and would like to create a branched out rule for a group of users to be authenticated using ACS. How do i get this done and what is the mcget syntax that can be used on the APM.