Yeah, I use it regularly. For LDAP, you'll need to deploy their LDAP Authentication Proxy.
They have a nice guide written up on it on their site;
https://duo.com/docs/ldap
Read up, deploy in an LXC, and then point your LDAP traffic -> Auth Proxy -> LDAP Server.
That should do the trick.