Maybe a too complex password, compare settings:
View attachment 76978
Network --> Access Platform -> ONVIF -> Authentification = "On"
System --> Account -> Onvif User --> check user & pass
System --> Safety -> System Service -> ONVIF = "Enable"
Yes, I did avoid annoying problems with password URL-encoding. Always a good call out though.