EAP-TLS with check on DB possible?

Hi, a newbie question before I start setting up Freeradius with EAP-TLS. Is it possible to configure Freeradius to make a double check when it receives an authentication request? I'd like it not only to check if the client certificate is valid but also if the user is in a DB "authorized_users" table. Thank you very much for your indications, Stefano