Can you use the Authproxy option for this purpose until official support? I'd prefer something native as well but this is what I was planning on doing.

https://duo.com/docs/authproxy_reference