You can configure sso without subfolder. It’s easier with a subdomain. I looked at the link and don’t see anything there that would suggest otherwise.
You can configure ssl on both subdomains. That too will be easier than using a reverse proxy which is required for subfolder.