How can I determine if a user uses Mobile ID, password, and SMS code (PWD/OTP) or any other method as signature approval?

The so-called "webfinger" call could use the different methods in their namespace to check what methods are registered for a user. Have a look to the webfinger documentation.