The applying solution you established while in the app registration portal for the application. Do not use the applying secret in a local app or single web site application since a client_secret cannot be reliably stored on gadgets or Websites. It is expected for Internet applications and web APIs,