Related: Duo SAML 2.0 integration questions
If this native DUO integration moves forward, it MIGHT allow for more advanced options, like require operators to use DUO 2FA before creating actions (in addition to logins) or other similar things that I think using SAML would not make as possible.