For the first issue, the error message returned to you is explaining that the Client you are currently using is only able to use the Authorization Code
grant type. If you want to use password
instead, make sure that Resource Owner Password
enabled as an allowed Grant Type
in the Okta admin console:
For the second, can you confirm that the same user is able to log into your org with the same credentials you are using in that Postman request?