@martin.sommer1 there may be an error in the docs or an updated flow that was not communicated clearly. The docs say to “Add the any wildcard domain to your OAuth Allow list”, but try this flow without the any wildcard domain in the OAuth allow list:
If that does not work, try with both in the OAuth allow list like this: https://example.com https://any.example.com
Additionally, do you have either of these checked?