Proxy and MFA our client's RD Web through Cloudflare at the DNS level

Is there a particular Zero Trust plan we need to be on to enable MFA through a Cloudflare proxied connection to our client’s Remote Desktop gateway environment?
Is this functionality even possible? Thank you.