I found the answer to my own question by trial and error.
In the map, I mapped LDAP attribbute name "homeDirectory" to "WebVPN-Macro-Substitution-Value1"
In my bookmark, I then use "CSCO_WEBVPN_MACRO1" as the variable.
I cannot believe this is so badly documented.