identifying users of cisco SBL vs VPN after logon users

Hi guys, is there a way anyone knows of to differentiate connections to a cisco anyconnect box between users who are using sign in before logon vs those who login to the vpn after signing into their win10 accounts?