[SSSD-users] ID provider AD vs LDAP

I'm attempting to setup SSSD using AD as the id provider. All the documentation that I've found results in the linux system joining the AD domain when configuring sssd in this manner. I would like to configure sssd running on RHEL to just do authorization (access_provider) against the AD domain and *not* actually join the AD domain. I assume that this would mean I should not set "access_provider = ad". Instead should this value be set to ldap? If I configure sssd to use LDAP as the access provider, how would I address the Active Directory domain ad.example.com using the "ldap://" notation? Would there be any other changes that I would need to address in the sssd.conf examples that use ldap as the access provider?