Two-factor for local passwords?

[mzimmerman]

We seem to remember this being an option somewhere, but can't find any documentation on it.

Is there any support for two-factor (i.e. DUO) for local Canvas authentication?  We're implementing two-factor on all our SSO authentication, but most of the admins also have separate admin accounts with local logins that don't go through the SSO.   Since those are arguably the accounts that would benefit most from two-factor, we're hoping to be able to add that without breaking local logins for the non-admin visitor accounts that can't log in through the SSO.

Thanks!