Ilya,Could you link to the specific sections please?In my opinion, SSSD should be completely removed if not utilized and the LOCAL provider should never be configured since it allows you to effectively hide accounts from standard scanning utilities.
If you're using LDAP, it completely makes sense.