Using LTM to SSL Offload a APM Server

A webtop is a not a requirement for APM configurations. You typically need them for network access and portal resources, but for simple AAA services, they're not used at all. If you want to directly access the Jira-based website, not through an SSL VPN or through a portal rewrite, but still provide some form of pre-authentication and/or single sign-on, then simply create an access policy that includes whatever client side (AAA) auth mechanisms and server side (SSO) mechanisms you need, and no resource assignment (webtop).