we did set it up without IAS.
Since we are getting routed correctly to our login page we seem to do it correctly.
We did set it up as described here under "Federated Authentication":
Federated Authentication | SAP Help Portal
Note: Microsoft adfs is different from Azure AD.