Follow these steps
> Click on Setting Gear icon of facebook
> Click Manage Apps
> there You'll get your App ID and a link saying "show" below App Secret
> Click that "Show" Link and get your App secret
Also facebook gives you an App ID for each app which is public ID and an App Secret which is to authenticate that you and only you can manage your apps, you'll need your App Secret each time you make an API call to facebook.
As for as a user is concerned each user has got his/her facebook ID and for each user, your app is given an access token to get access to user information or act on behalf of a user depending on permissions asked by user App from user, Given the User has accepted those permissions and the access token is valid.
Further the validity of Access token depends upon expiry period plus access token can also expire if user changes his/her facebook password