Getting issue with certificate based authentication of BIG IP APM

Check out: https://devcentral.f5.com/articles/apm-cookbook-on-demand-vpn-for-ios-devices

Follow Steps 1 & 2 to setup the Client SSL Profile. Then add the On-Demand Cert Auth, start of step 3.5 & 3.6. You will need to perform a Kerberos SSO to OWA. So have a look at https://devcentral.f5.com/articles/apm-cookbook-single-sign-on-sso-using-kerberos, replace Sharepoint with OWA.