The application secret which you established inside the app registration portal for the app. Never use the appliance secret in a local application or single web site app simply because a client_secret cannot be reliably saved on devices or web pages. It can be essential for web applications and World-wide-web APIs, that may store the client_secret