HANA cloud platform integration with LDAP

Hi,

We are trying to establish Cloud platform integration with LDAP.

SAP HANA Cloud Platform requires ADFS to establish the SAML SSO with LDAP . Since best practice is to not install the ADFS role on a domain controller because it requires IIS, where are we supposed to install ADFS? Do we need to add up another virtual machine and set up ADFS for only this purpose?

Regards

Radhika