Get the First Confirmed Multi-Factor Authentication Enrollment - behaviour when recovery code enrollment is present