Yes, this is exactly what the ACS does. ACS includes TACACS, TACACS+ and Radius AAA Capabilities and can handle a lot of Vendor Specific Attributs (Aironet, IETF etc). You can use internal or external Databases, or Authenticate against Windows (LDAP) Database. Maybe for the Wireless ACS can handle the whole Range of EAP Authentication, like EAP PEAP or TLS.
Under this link you will find a lot of configuration examples and General Informations about ACS: