SIP Trunk registration failing during Zendesk Voice migration

Need some help troubleshooting SIP trunk registration failures while migrating from Zendesk Voice. The trunk drops with 403 Forbidden immediately after registration. We are trying to map Zendesk phone numbers to Genesys Cloud SIP connections. The payload looks standard but the gateway rejects it.

{
 "username": "agi_user",
 "password": "encrypted_hash",
 "ip_address": "203.0.113.45"
}

Any ideas on the auth mismatch?