Look at the requests coming from your AP in debug mode.  You should see information there that can be used eg called station id with SSID appended or a VSA with the SSID name or number in it.  Use that with your policy

alan