External App Connecting to AD

Hi

I have been tasked with connecting an external library web app to our AD (LDAP) for authenticating students. Can I just create a policy allowing only LDAP to a domain controller? or should I setup FSSO? is one more secure than the other?

Thank You

Marc