SAML SSO breaking my Python script's OAuth token fetch

We just forced SAML SSO for all users. Now my Python script using genesyscloud SDK fails to get an access token.

client = ClientBuilder.build_basic_client(
 username='bot@company.com',
 password='password'
)

It throws a 401 Unauthorized. Does SAML disable password auth for API keys? How do I get a token for my service account now?