I'm not sure you can actually use the API using SSO / Oauth. Metabase has basically no documentation on how to implement this, although they do have endpoints that theoretically make it possible. This thread might help you: Accessing REST API with Google OAuth.
Though if your concern is security, I believe setting up a dedicated user just for accessing via API (with a really strong password) should work fine, as long as you handle the credentials safely.