No.
You could use AnyConnect and Duo, and authenticate against Office 365. I would use this option.
You could use a machine running inside of the network running the Duo Auth proxy and configure the MX to do RADIUS against it, and have the auth proxy configured to do MFA only.
This would result in the username+MFA being used, but the password being ignored.