Hey Gareth, you can turn your administrator logs to "detailed" and then check those for any authentication requests.  If you don't see any authentication requests in that log then we would need to capture a Fiddler trace to see how/where the client is submitting authentication requests.