The application secret you made inside the app registration portal in your app. You should not use the application magic formula in a local application or solitary web page application since a client_secret cannot be reliably stored on products or web pages. It really is expected for Net application