H-series missing VPN 2FA option for external(AD/LDAP) users

Is there a timeframe to add back the ability to enable VPN 2FA for External-Users on the H-series?

We normally use external-users/external-groups to centrally manage the allowed VPN users. On the H-series, there is no way to do 2FA for these external users without using an (expensive) 3rd party service such as DUO.

The previous ZLD firewalls would pull the email address from the Active Directory user account to send the authentication email to the end-user. It was simple to use and worked great.

See screenshot showing the setting I am referring to on ZLD-based firewall:

Are there any plans to add the above feature back to the new H-series?