How to send users to different URI based on AD group

Hi,

 

I need some guidance on how to create a APM policy to send users to certain uri's based on their AD group. We have a application called Finesse that the UC team wants all users to login into one url, but get sent to a different uri depending on the users AD group. These users float around to different building so source ip address wont work in this scenario. So what APM options should I use to accomplish this issue? I was looking at the options and saw AD query and landing URI, but I'm 100% sure. thanks