you should be using Metabase enterprise or Pro right? if that's the case, you can disable basic authentication from settings->admin->authentication (it's at the bottom of the page=
Not really. I'm using the Metabase Open-source and we always had SAML configured (via Google Workspace), but never we found a way to have it as the only authentication mechanism.