Wow! Single VLAN. Well, there are some settings to prevent a broadcast storm. I use 4 VLANS, partly for conceptual / visual purposes for our campuses. Also helps with our IPSEC VPN across campuses. When I log into the controller, I can easily distinguish which IPs are associated with a specific group. However, there are many ways to accomplish the same purpose. Side note, we used to have Aruba APs in use with their wireless controllers.
Edit:. The shared doc is a good read. Thanks for sharing.