In short, in Enterprise mode, as an admin, you can use impersonation for each user with the auth.get_credentials API call and get the last used time for each credentials set (created time is not available right now). You can use impersonation again with the auth.revoke_credentials API call to revoke a credentials set.