The appliance magic formula you made inside the app registration portal for your app. Will not use the application solution in a local application or single site app simply because a client_secret can't be reliably stored on units or Web content. It really is required for World wide web apps and World wide web APIs, that may retailer the client_sec