Hi Tony, welcome to the Duo Community! Yes, this is possible. Borrowing from a past answer from @DuoKristina:
You can use the same Authentication Proxy RADIUS configuration with [radius_server_auto]
described here with IPSec connections.
Then in the Fortigate you should be able to specify that Duo server as the RADIUS server for remote IPSec users.