Require 2FA When Connecting to SQL Servers

Due to compliance requirements, we are looking for a way to require 2FA to connect to SQL servers using SSMS.
I saw a demo from CrowdStrike showcasing their identity module for this purpose, but the feature has not been released yet, and the beta is still pending. We currently use Duo for 2FA, so integrating it would be ideal. Do you have any ideas on how to accomplish this?