Merge pull request #235527 from cilwerner/patch-7

Add advice on development and production app versions

Author: prmerger-automator[bot]

includes/active-directory-develop-quickstart-register-app.md

@@ -35,7 +35,7 @@ The Microsoft identity platform performs identity and access management (IAM) on
 
 ## Register an application
 
-Registering your application establishes a trust relationship between your app and the Microsoft identity platform. The trust is unidirectional: your app trusts the Microsoft identity platform, and not the other way around. Once created, the application object cannot be moved between different tenants.
+Registering your application establishes a trust relationship between your app and the Microsoft identity platform. The trust is unidirectional: your app trusts the Microsoft identity platform, and not the other way around. Once created, the application object cannot be moved between different tenants. 
 
 Follow these steps to create the app registration:
 
@@ -72,7 +72,7 @@ Your application's code, or more typically an authentication library used in you
 
 A _redirect URI_ is the location where the Microsoft identity platform redirects a user's client and sends security tokens after authentication.
 
-In a production web application, for example, the redirect URI is often a public endpoint where your app is running, like `https://contoso.com/auth-response`. During development, it's common to also add the endpoint where you run your app locally, like `https://127.0.0.1/auth-response` or `http://localhost/auth-response`.
+In a production web application, for example, the redirect URI is often a public endpoint where your app is running, like `https://contoso.com/auth-response`. During development, it's common to also add the endpoint where you run your app locally, like `https://127.0.0.1/auth-response` or `http://localhost/auth-response`. Be sure that any unecessary development environment redirect URIs/environments are not exposed in the production app. This can be done by having separate app registrations for development and production.
 
 You add and modify redirect URIs for your registered applications by configuring their [platform settings](#configure-platform-settings).