Greetings,
Using SM20, I was able to determine the logon method.
Logon successful (type=A, method=P ) was using password
RFC/CPIC logon successful (type=F, method=R ) was using SSO.
Of course the logging filters for the corresponding events have to be activated.
Cheers,
Rick