During Covid we used ExamProctor, and where it picked up visual cues (head movements) we could identify that the student was logging in vi a second device out of sight on their knee - so if the second user is on the same access/IP address as the primary user, you'd be able to identify two devices but not whether there were two distinct users.