Keycloak as Authentication Server for Pulse Connect

We have Pulse Connect VPN hardware device, I wanted to integrate KeyCloak with it for authenticating Users using Pusle connect Device.
Pulse Connect Device is to provide VPN connectivity, currently it is authorizing users on the basis of Radius Server configuration, Can I replace Radius Server with Keycloak and can I also use 2-factor authentication on keycloak ?