Yes. That is what I mean. You need to add it to your service as an Authorization source. Then in Enforcement you can do something like:
Authorization:SQL-Session-Check Session Equals 1
Captive portal redirect to a page that tells them they are only allowed one device on the 802.1x network.