SAML SSO authentication via BIG-IP Edge Client for network access

Forgot to mention that we are trying with the BIG-IP Edge Client

Still same issue after removing the decision box. The policy of the VPN is restarted at the exact moment that the SAML response from the Idp is sent. The response redirects the user to /saml/sp/profile/post/acs Or should it be redirected to the webtop page?

When I try the VPN in brower like firefox I'm successfully redirected in the browser to the full webtop where the network access is defined. Edge Client uses Webbrowser control and doesn't show the webtop (or only very briefly) but starts the VPN automatically after successful authentication normally. In the webbrowser control the SAML request and responses can't be checked like in a normal browser.