The first user mapping that matches an incoming connection is used to route the user. In general, the most selective rules are ordered, so they appear at the top of the user mapping list.
If necessary, alter the order of routing rules from Business Continuity Manager UI or at the bcmadmin prompt.