Yup, you were right---it was an ONVIF password issue. Got the Substream up and running. Thanks, @wittaj!
Funny though, I can access the cam using admin and my current password via the DMSS iOS app, but this same password is invalid for the "User" admin and "ONVIF User" admin accounts in the...