When you run simp config when installing from RPM it can give you an error that you might possibly be locking you out.
It creates a file in the /root directory that contains instructions on how to prevent this.
This needs some updating.
1) It says create a manifest but you might need to create a module and add this module to the puppet file.
2) I am not sure about this but does the user need to have a valid home directory? At one time SIMP prevented users from logging in if their home directory was not valid.
3) Copying the ssh keys it needs to instruct them about correct permissions on the /etc/ssh/local_keys directory if it does not exist.