SIP trunk registration failing with 403 Forbidden after migrating from Zendesk Talk

How should I properly to handle sip trunk registration when moving from zendesk talk to genesys cloud? we are migrating our support desk and trying to set up the byoc trunk. in zendesk, we just added the sip credentials in the admin panel and it worked instantly. here in gc, i followed the guide for sip trunk configuration but when i try to register the endpoint, i get a 403 forbidden error. the logs say ‘authentication failed’ but i triple checked the username and password from our provider. is there a specific setting in the sip trunk configuration i am missing? maybe something with the auth type or realm? in zendesk, we didn’t have to worry about realm matching exactly. also, our provider uses port 5060 with tls. should i be using a different port for the outbound proxy? i am quite new to gc admin config so any help would be great. feeling a bit lost compared to how simple zendesk was for this part.