A pair of credentials a provider like Google or GitHub hands you when you register your app: the client ID names your app publicly, and the client secret is a private key proving you really own it. Both are needed to complete the OAuth flow.