Can you confirm that the password grant setting is turned on you application settings?
And make sure the app is authorized to access the API you are declaring in the audience param.
audience
