AP Policies can be used to have a list of approved AP's. It is also possible to back this off to Radius. Remember to check the MAC address delimiter. Add the MAC address of the AP to ACS with the MAC as the username and password.
Also you must check "Network User" on the Radius server as the server cannot be individually specified.