FortiClient does not prompt while waiting for two-factor auth

We've got Duo two-factor working with the FortiGate SSL VPN. However, FortiClient does not notify you when it's waiting on two-factor. After entering credentials, it sits and waits at 45% without telling you why. Is this a bug, intentional, or just overlooked? Or am I missing something?