two VS, one APM and check AD group membership

Hi Sanjay

thank you for your help

that's ok for the authentication between the two VS, I managed to do it using one single APM policy and you're true the SSO domain cookie avoid user to be prompted

problem I can't fix is this one :

for one specific url on one of the two VS , and if user isn't member of a specific AD group,, I must reject the request but it has already been accepted by the APM ...

have a nice day

regards, Patrick