The applying secret that you simply produced in the app registration portal for your app. Really don't use the application secret in a local app or solitary site app simply because a client_secret cannot be reliably stored on equipment or Web content. It truly is required for World-wide-web apps