protected DuoSecurityUserAccount getDuoSecurityUserAccount(final Principal principal) {
        val duoAuthenticationService = provider.getDuoAuthenticationService();
        if (!duoAuthenticationService.getProperties().isAccountStatusEnabled()) {
            LOGGER.debug("Checking Duo Security for user's [{}] account status is disabled", principal.getId());
            val account = new DuoSecurityUserAccount(principal.getId());
            account.setStatus(DuoSecurityUserAccountStatus.AUTH);
            return account;
        }
        return duoAuthenticationService.getUserAccount(principal.getId());
    }
This is {@link DuoSecurityDetermineUserAccountAction}.

@author Misagh Moayyed
@since 5.2.0
support/cas-server-support-duo-core/src/main/java/org/apereo/cas/adaptors/duo/web/flow/action/DuoSecurityDetermineUserAccountAction.java