passing UPN to ldap auth profile

Hi,

 

 

I'm can extract from user certificate extensions UPN (userPrincipalName). Is it possible somehow to authenticate client, by matching UPN from client cert with userPrincipalName attribute in MS ActiveDirectory?

 

 

tia,