have you considered implementing OAuth 2.0 authorization code flow it will allow users to authenticate without the need for client secrets.
Azure Active Directory (AAD) authentication or aad B2C authentication within a PHP application
My PHP application, which is built on WordPress, currently utilizes WordPress AAD authentication with client ID and client secrets. However, I am looking to discontinue the use of client secrets. Presently, I am using the functionality available on GitHub.
https://github.com/psignoret/aad-sso-wordpress
I'm exploring alternative solutions that work for PHP without requiring client secrets. I also consulted the Kiota documentation, but it also relies on client secrets.
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Microsoft Security | Active Directory Federation Services
Federated identity management using Active Directory Federation Services
Microsoft Security | Microsoft Graph
An API that connects multiple Microsoft services, enabling data access and automation across platforms
Microsoft Security | Microsoft Entra | Other
Additional Microsoft Entra services and features related to identity, access, and network security