Hey Robert,
I might be able to clear some of your confusion. Generally with OAuth, you have a developer account so that you can build your app. Lets say your app looks for people's invoices. Now, when people want to use your apple, they simply authorize your developer-account, to access their data.
So in terms of FreshBooks, lets say your account is '
https://developer-robert.freshbooks.com'. For the developer-account, you simply provide the subdomain, 'developer-robert'. Now for the user account, it HAS to be a FreshBooks account. So suppose there's a user whose account is '
https://customer.freshbooks.com', you would provide the subdomain, 'customer' for the 'user-account' credential.
Unfortunately, in your particular case, clients on your system cannot use OAuth. Clients don't even have access to the API. What are you trying to build? I might be able to suggest some work-arounds.
Finally, for the 'oauth-secret', Its in your FreshBooks account under 'My Account > FreshBooks API". In the "OAuth Developer Access" section, click on "Use OAuth" and a form will pop up, asking you how you will be using it. We'll then review your form, and grant you access. At at point, the secret will appear in that section.
I hope that answers your questions!
Anton