MFA for pfSense VPN server services

Ok kicking this whole subr... I mean community off here. I have have been digging around trying to figure out what the best way would be to offer a MFA solution for a client VPN solution that can be run on pfSense. Have found that OpenVPN on pfSense does NOT support SAML even though the AC version does ☹️. I know you can also point OpenVPN at RADIUS server which can then use SAML but was looking for a little more, direct solution. Open to any ideas really and interested to see what if anything has worked for others out there. Thanks!