Much appreciated. We’re almost there!
Now, I’m getting "The parameter \"grant_type\" was malformed: value must be one of \"authorization_code\", \"password\"" message.
Same settings as above, but moved them to Body and changed Client-ID to client_id.