Traffic policies - look at SSO Password Expression? eg http.req.user.attribute(1)+http.req.user.attribue(x)?
https://support.citrix.com/article/CTX200261 I haven't done this myself yet so don't know if that would work, but was reading up on it for something else and it came to mind for your question.