User-level Profile Management -> "Logins disabled for" Mail

I've set up a fresh install of Yosemite (10.0.1) and Server.app (4.03) and turned on a number of services successfully.

I want to use Profile Manager to handle the configuration of enrolled devices, but I want to manage the minimum number of variants (i.e. fully populated for a user, but shared amongst devices) so I've set up the user profile with Mail, Contacts, and Calendar. I don't intend to get fancy with settings so this is all we need.

The payloads for these three services should be device-agnostic and the Macs work fine, yet I'm receiving an error on iOS devices for the Mail configuration; specifically, "Cannot get mail. Logins disabled for [Mail Account Name]".

I've verified the settings that were pushed onto the iOS devices and they look fine. I'm wondering if anyone else has experienced this problem and if the only the recourse is for me to set up a device-level configuration (perhaps as a per-user device group as the next degree of low maintenance configuration).

Thank you