Check Cisco's page for CCX certified, that means the vendor provided utility (free with every card) would support EAP/LEAP/EAP-Fast/TLS, etc
We just use the vendor provided utility (typically intel pro set). Intel pro set is, imho, the most "admin friendly" utility, as you can build admin profiles, that users can't touch, you can create a .exe update with all those admin/non admin profiles and push those out to a single folder and have them automaticaly imported by the proset utility.
As an FYI, most of the vendors (iirc) license the meetinghouse client (still a few funk based ones) to integrate into theirs.