to have a signed certifcate (https) on your instance

open {BASE_URL}/admin/settings/experimental

enable "Built in OAuth applications" flag

open {BASE_URL}/admin/oauth/applications

enable "Built-in OAuth applications" there

log in inside the app

NOTE: from version 17.0, the flag "Built in OAuth applications" is not in experimental any more