This is probably not best practice, but I have a few AD accounts that share a DUO account as aliases.
AD Account:
Username1
Username2
DUO account:
Username1 (Username2 is an alias)
Would performing directory sync create a new DUO account for Username...