bigip f5 vpn AD authentication using 2 different OU using irlues

Would this work to authenticate either of 2 different OU's?   expr { [mcget {session.ldap.last.attr.distinguishedName}] contains "OU=IT" || [mcget{session.ldap.last.attr.distinguishedName}] contai...