Fortigate MFA

@HS08 to use 2fa for wildcard administrator it would have been possible if you are using FortiAuth since you can use token.

With third party, you can try following below article 

But on step 5 (Create Administrators as desired and assign profile and remote user group.) select match a user on the remote server group and enable 2fa locally on the FGT