The application secret that you just created within the app registration portal for the app. Never use the applying top secret in a native application or one webpage app simply because a client_secret can't be reliably stored on devices or Websites. It truly is required for Internet apps and Website APIs, which could retail outlet the client_secret