Hello! I am working on setting up the Three-Step TBA Authorization Flow. I am stuck on step one, when I send the POST request, i get

{"error" : {"code" : "USER_ERROR", "message" : "Invalid login attempt."}}

error. I’ve verified that I’m generating the right authorization header based on the example in the documentation. Any tips?

Realm always gets me, although it appears it's no longer required.

So what I am hearing is that i need to include realm?