Using the endpoint above be sure to use the realm parameter (requires adjusting the grant type also) to specify the exact database connection associated with the user; otherwise the endpoint will use the default connection configured at the tenant level which might not be correct.