When the client associates to an access point joined to a new controller, the new controller exchanges mobility messages with the original controller, and the client database entry is moved to the new controller.
New security context and associations are established if necessary, and the client database entry is updated for the new access point. This process remains transparent to the user.