APM Sharepoint authentication v2

I am still having issue with launching office app even using above iRULE. Following APM Policy I have:

text

START -> IP SUBNET MATCH -> Internal IP -> Don't do anything -> ALLOW Extenral IP -> Logon Page -> AD Auth -> SSO Crendetial Mapping -> Variable Assigne-> Allow Fall balck ---------------------------------------------> Deny