How DAP are mapped to Tunnel-Group

[ahmad82pkn]

New to Anyconnect DAP.

Got some existing setup with dozen of Tunnel groups and dozen of DAP policy configured.

Scratching my head , how DAP policies are mapped to tunnel groups?

How does tunnel group know, which policy to call for applying policies?

Is there a flow chart that can help me understand how DAP are triggered when a user connect with a tunnel-group?

Thank you in advance,

[ahmad82pkn]

I think. I found the answer. Dap xml seems to have matching tunnels group

[MHM Cisco World]

the Auth is done by LADP which use some user info to return specific attribute to FW, one of these attribute is DAP

MHM

[sSiDiUSs]

Could you please clarify, how it do it?
I have abount 10 GP ant TG. I want use DAP to check some security software installed and antivirus for 1 GP and TG assigned to it.
But is seems that whatever i choose aliais in client ...DAP policy runs on every GP....