In Azure AD, you can see the first enrollment date and time of an authenticator app by viewing the user's device information. Here are the steps to view this information:
- Sign in to the Azure AD portal (https://portal.azure.com/) with an account that has the appropriate permissions.
- In the left navigation menu, click on Azure Active Directory.
- Click on Devices, then select All Devices.
- Select the user whose device you want to view.
- In the device details page, scroll down to the "Authenticator App" section.
- The first enrollment date and time for the authenticator app will be listed under "Authenticator App Enrollment Date".
It's important to note that the user needs to have the authenticator app configured and running on their device for the Azure AD portal to show the enrollment date and time.
Also, it's worth mentioning that the device that was used to enroll the authenticator app should be joined to Azure AD, otherwise, you will not be able to see the authenticator app enrollment date and time.
Keep in mind that you can also use Azure AD PowerShell to query the device information and filter by the 'AuthenticatorAppEnrolled' property to check the enrollment date and time of the authenticator app.