Local Web Authentication using ISE

Dears,

I think there is a missing step in the soluiton of the subject task which is assigning the authorization profile to an authorization rule and in which we add the condition service-type=outbound.

Please correct me if i am wrong.