Using LDAP, look up the customer and find the lockoutTime variable
There are 3 different states this variable has.
Unspecified: This means that the user has been locked out before but is currently not locked out of their account.
Some specified time: This means that the user was locked out at that specific time and will automatically be unlocked 20 minutes from that time.
The variable does not exist: This means the user is not locked out and has never been locked out.