It looks like the documentation isn't accurate anymore.
Step 11: https://developer.intuit.com/app/developer/qbo/docs/develop/authentication-and-authorization/oauth-2.0
| Parameter |
Description |
| code |
The authorization code sent by the Intuit OAuth 2.0 Server. Max length: 512 characters |
| realmId |
The unique ID of the connected user’s QuickBooks Online company It’s also sometimes called the “company ID.- Use the realmId for subsequent API endpoint URLs to get data from QuickBooks Online companies. |
| state |
The state value sent from the Intuit OAuth 2.0 Server. It should match the state sent in the original authorization request. |