The configuration profile only states the minimum required length of 4, but a length of 4-16 can be used. I am not very familiar with newer Android devices, but this could be a restriction of newer versions of Android not allowing passcodes shorter than 6 or 8 digits.
Please accept as an answer if this was helpful.