protected Authentication buildAuthentication(final PasswordlessUserAccount user) throws Throwable {
        val userAttributes = CollectionUtils.toMultiValuedMap((Map) user.getAttributes());
        val resolvedPrincipal = authenticationSystemSupport.getPrincipalResolver()
            .resolve(new BasicIdentifiableCredential(user.getUsername()));
        val attributes = CoreAuthenticationUtils.mergeAttributes(userAttributes, resolvedPrincipal.getAttributes());
        val principalId = resolvedPrincipal instanceof NullPrincipal ? user.getUsername() : resolvedPrincipal.getId();
        val principal = passwordlessPrincipalFactory.createPrincipal(principalId, attributes);
        return DefaultAuthenticationBuilder.newInstance().setPrincipal(principal).build();
    }
Should delegate authentication for user?

@param requestContext the request context
@param user           the user
@return true/false
support/cas-server-support-passwordless-webflow/src/main/java/org/apereo/cas/web/flow/BasePasswordlessCasWebflowAction.java