2FA authentication with SSO on APM

Hi

i have configured two factor authentication with AD and RSA for users to connect to application on APM. but i need SSO configuration on APM to pass the AD credentials to application. the policy i have configured will change session.logon.last.password to password1 to pass the RSA token to RSA server.So how do i get actual AD password session ID to configure SSO.

Policy Logon page -- configured password1 as session variable for RSA--AD auth -- varible assign as below--RSA auth--SSO mapping - backend server Variable assign expr {[mcget session.logon.last.password1]}