iRule to Convert SAML Assertion To Header Based for Autorization

You can do it by assigning sso profile (like Kerberos which is passwordless) to access profile

if you want to add headers, create a per-request policy which insert http header on each request, then assign this policy to vs