Seems you want to leverage the SMART ACCESS FILTERS. These are "keywords" (any string really) that is passed from the gateway (ie the APM) the the XenApp server.
The XenApp server matches the keyword/string, and then presents the Apps that are tagged to be presented when thsi keyword/string is presented - ie the "smart access filter"
Eg: STAFF would allow "staff" apps to be displayed. GUEST would allow "guest" apps to be dispalyed.
See:
1) http://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-citrix-integration-11-3-0.html
and
2) http://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-citrix-integration-11-3-0/3.htmlunique_1681640482