I've setup an Http auth server that gives back a response which includes auth status and application rights
the response looks like an XML file
app1;app2,app3
status
...
The AAA HTTP server is used in the APM policy so no sideband irule , at the moment i use the build in logon page .
But we will have to switch to an external logon page in a later stage