reference variable in SSO config

Is it possible to assign a variable in the access policy rule (e.g. session.sso.token.last.domain), then use that variable to assign value to the NTLM Domain field of an SSO configuration? This is in APM 10.2. Assigning the variable is easy, but the assigned value is either not being used for the NTLM Domain, or is failing further downstream. I'm just trying to confirm that this is an allowable configuration.

 

 

Thanks

 

Eric