Inject client Authorization Header Into APM sso variables

I got it to work with help from our internal F5 engineer! Thanks Mike! Just change the event in the iRule to "ACCESS_SESSION_STARTED", and needed to trim the string e.g):

when ACCESS_SESSION_STARTED {
    ACCESS::session data set "session.logon.last.username" [string trim [HTTP::username]]
    ACCESS::session data set "session.logon.last.password" [string trim [HTTP::password]]
  }

Also did not require the 1st SSO credential mapping in the VPE. AD takes the parameters from the iRule above without anything in betwixt.