The IAPs run slighty different code so the features from mobility controller code don't line up 100%.
Currently AirGroup and IAP-VPN are the supported equivalent features on the IAP product. Functionality-wise the IAPs do centralized image upgrade but the feature on the mobility controller is a different implementation.