The Extension Mobility service needs to use an account to log into the Cisco CallManager server and download the new device profile. That account needs to have Enable Authentication Proxy Rights enabled.
In order to resolve the issue, complete these steps:
From AppAdmin, go to Generic Application and choose the login application.
Check which user is assigned to this application.
Choose CCMADMIN > User > Global Directory and check if this user is still listed.
Make sure Enable Authentication Proxy Rights is enabled for this user.
Verify the same for the logout application.
Refer to these documents for more information about how to troubleshoot Extension Mobility: