Unfortunately we do not have any public documentation at this level of technical detail, but I'll email you separately to see if we can get you the information required for your audit.
In newer versions, an indicator for the login type is included in the User Accounts report you can run in Configuration. It's not so easy to work with but at least it's something.
