To help you decide, read through the conditions and scenarios described for each option:
Option A. An authenticating directory with primary user objects
Option B. An authenticating directory plus a secondary directory