Oh I was using the /u/{username}.json endpoint.
But doing the reverse engineer I realised that the correct endpoint is /admin/users/{id}.json. This endpoint return a field called “single_sign_on_record” which is what I was after.
Cheers, tks @pfaffman