... maybe is there something going on with the profile not being understood to be the same by both the iOS app and the server?
I was looking down the list of iOS issues and that second one on the list makes me wonder. https://www.ibm.com/support/knowledgecenter/SSYRPW_9.0.1/iOSKnownLimitations.html
I don't really know. It may be the profile is perfectly fine. Someone with experience could probably tell you more.