The first user mapping that matches an incoming connection is used to route the user. In general, the most selective rules should be ordered so they appear at the top of the user mapping list.
If necessary, alter the order of routing rules from Unity UI or at the unityadmin prompt.