Please refer to the Instant 4.0 Users Guide under Integrating an IAP with Palo Alto Networks Firewall for details. In a nut-shell it allows information to be shared between the Palo Alto firewall and IAP regarding Users, roles, and levels of access.
If you do not have PAN there is no need to enable it.