Hi Steven,
The best that can be done is to configure same SSID name, VLAN and security parameters on both APs.
When you reach third floor your device will scan for the previously connected SSID name. As long as the AP in third floor broadcasts the same SSID, with matching security configuration, the device will get connected.
Are you seeing any issue when you roam to third floor?
Thanks