The application secret that you established from the app registration portal for your personal app. Don't use the appliance magic formula in a local application or single web site app for the reason that a client_secret cannot be reliably stored on equipment or Websites. It really is necessary for World-wide-web applications and World wide web APIs