The appliance solution that you choose to established from the app registration portal on your app. Don't use the application secret in a local app or one site app for the reason that a client_secret can't be reliably stored on units or Websites. It is expected for World wide web apps and World-wide-web APIs, which could keep the client_secret secu