You need the application’s id property value returned in Step 1 to retrieve the application’s secret property value. The GET /environments/{environmentId}/applications/{applicationId}/secret returns the secret property value for the application specified in the request URL.

The secret property value is needed in Step 16 to validate the request to exchange the authorization code for an access token.