Softphone Initiation Failures During Zendesk-to-GC Migration

Can anyone clarify the correct payload for initializing the Genesys Cloud softphone via the Web SDK? In Zendesk, we used a simple token. Now, using the Genesys Cloud Web SDK 3.2.0, the initialize call fails with 401 Unauthorized. We are migrating from Zendesk Voice to GC. Here is the payload:

{
 "username": "[email protected]",
 "password": "secret",
 "mfaToken": "123456"
}

Is MFA required for this endpoint?