The application secret that you established during the app registration portal to your app. Never use the appliance secret in a local application or one web site application simply because a client_secret cannot be reliably saved on equipment or web pages. It is really needed for World wide web apps and World-wide-web APIs, which often can retail o