Yes, the default gateway for the wireless network is on the L3 switch.
Yes, the IP helpers are on the L3 switch. I can connect a laptop and receive ip addressing from the DHCP server without issue, so I know that connectivity is good.
For debugging purposes, I resorted to changing all the default roles on the profile to "authenticated" or "allow-all". Is there some other way to "allow" DHCP packets on the controller other than the roles I just listed and is that the same as the client role you asked about?
Appreciate the help.