what are the best practices to implement high level of Authorization and authentication for iOS apps?

Authorization and authentication relative to what? A web page login? An Apple ID?

Also, authorization and authentication in what circumstances? Are you trying to protect local data on the device? Data in transmission over the network? Data shown in the UI?

A bit of clarification here would help.

Emma:

"...seems that there should be better practices rather than hard coded client Id and Client Secret key."

Perhaps a later Xcode than v7.x, for starters, where your app could better leverage current APIs - example: Touch or Face ID might better meet your spec, where hard coded id and secret key are fallbacks, instead.

This assumes you've already evaluated iOS Security, in general, of course.

Ken

Hi

Thanks for the response, We are looking for best practices on an enterprise level of user login authentication and authorization for high security level apps like online banking.