Ref T13231. See https://discourse.phabricator-community.org/t/duo-integration-crashes-if-user-is-not-enrolled-and-enrollment-is-disabled/2340/5
(There's an actual bug here, although I'm not sure exactly what's going on on the Duo side in the report.)