The application secret that you choose to created in the application registration portal in your app. Don't use the appliance magic formula in a native application or single site application since a client_secret can't be reliably stored on units or Websites. It can be expected for Internet apps and web APIs, which may shop the client_secret secure