SSO API 403 when mapping Zendesk SAML to Genesys Cloud Identity

Stumbled on a weird bug today with the Genesys Cloud Identity API. Mapping Zendesk SAML attributes to GC user fields triggers a 403 Forbidden error on the PUT /api/v2/identity/identityproviders endpoint. The payload validates locally but fails server-side during the migration script execution. Thanks.