APM on demand cert auth using attribute to map different resource group

Hi F5 buddy,   I currently setup APM using on demand cert auth without LDAP query, I need to use the cert attribute to map different resource group.   The ideal solution is as below:   Cert...