If I change the realm on the request to [companyid]_SB1 it returns invalid login attempt. So maybe it's a problem with the employee record