Mobile access APM

Hi Guys, I’m pretty new in APM. I have to configure on APM access to application hosted in internal network for mobile devices (VPN + SSO) and if is it possible access for mobile devices to application hosted in cloud. Please could you give me some advice how to build access policy for mobile devices? Do you recommend Edge client or Edge portal?

Architecture will be similar to below: https://f5.com/Portals/1/Images/whitepaper-images/empowering-mobile-users-to-work-anywhere-on-any-device/WP-F5-APM-SSL-VPN-39952-diagrams-airport.png

Regards!