Call API Using Resource Owner Password Flow

Yes, I made sure that both steps are as you described