If this is a large Wi-Fi deployment, you probably want to look at a system based on a wireless controller and LWAPs. The only real experience I have with such a combination is with Cisco. Cisco has a large product line of controllers, LWAPs, and WAPs.
Fortunately, the Cisco devices seem to perform well. There are occasional updates which we thoroughly test if the added features interest us. The wireless controller-based system allows the LWAP updates to be fairly painless since the LWAPs get their software and configurations from the controller.
Using Local mode means that both the management and data traffic are tunneled back to the controller, which can be remote from the LWAP. This has both advantages and disadvantages. The newer Cisco switches (3850, 45xx Supervisor 8, etc.) provide some wireless controller functionality built in to the switch to allow data traffic to be dropped locally. This mode allows for seamless roaming between LWAPs, regardless of subnet/VLAN, without re-authentication.
You could also use FlexConnect mode which only uses a tunnel back to the wireless controller for management traffic, but it will drop data traffic locally. Cisco called this a kludge, because roaming can only happen on the same subnet/VLAN withoutwith re-authentication. The switches with built-in controller functions can do something similar to this, on Local mode, without the kludge of FlexConnect mode.