VPN payload - On Demand

A question regarding Apple Configurator - VPN Payload - Custom SSL:
If I'm setting the User Authentication to 'Certificate', I'm able to enable the VPN On-Demand and add rules.
But if I'm setting the User Authentication to 'Password', I don't have the option to enable the on-Demand.
Is there a way to configure the on-demand if my connection requires just a PSK, and not a certificate?
Bumping this thread. Is there a way to set the on-demand from the profile for a custom VPN using password (and not certificate)?
VPN payload - On Demand
 
 
Q