From a colleague:
"There is a “maximum concurrent session” parameter for local accounts (when the controller is used as a RADIUS server, but with external authentication like AD, I don’t believe it is possible to enforce this."
If you have a Policy Engine like ClearPass, it would be possible to do it with radius accounting. Microsoft Radius servers do not have this capability.