Microsoft In tune & Google Services

alfonsojon

I tried using graphene OS on my phone for a while and was very pleased with how everything worked, aside from not being able to use it for my job. My job requires me to install Microsoft Company Portal from the Google Play store to set up my work profile. I believe this process is failing because the Google Play services are not automatically installed on the newly created work profile, causing an error. Can anyone think of a way I can work around this? Is there a way I can create a work profile manually, install the Google Play services, and then use intune?

Any help would be appreciated. Thank you very much!

Standardwaste

You can create a work profile from settings>system>multiple users. Once you have created that profile, if you select it, there is an option to install available apps which could be used to install play services. Hopefully this helps.

alfonsojon

Standardwaste thanks! I will try this out

So, would this profile actually be a work profile, or just another user on my phone? I think there is a distinction between the two and I want to get as much info as possible before wiping my phone again

MetropleX

alfonsojon it looks like you've been advised to create another user profile not a work profile.

The only thing I can think of as I don't use a work profile is to use an app like Shelter to create one, mirror our 'Apps' app into it and then install Play Services using the Play Store listing. Once done open Play Store and try to install Microsoft Portal that way.

alfonsojon

MetropleX The goofy thing is the Company Portal app actually gets installed into my personal profile. I wonder if I can use Shelter to create the work profile & use Company Portal from within the Shelter-created work file?

I'll post back with my results

grapheine

alfonsojon any update? I'm having trouble getting Intune to create my work profile when I sign in. Keep getting an error.

MetropleX

If InTune has started to enforce strict SafetyNet or Play Integrity API compliance then unfortunately the app may not work. You may need to contact your System Admin to determine if this is the case for BYOD.

grapheine what errors?

grapheine

MetropleX I may have misused the word error. It simply days it cannot create a work profile on this device.

R_MnTnA

grapheine Having the same issue when trying to install MobileIron. When Shelter creates a work profile MobileIron can’t continue. Then when I try the reverse install and allow MobileIron to create the profile, then Shelter can’t continue to use the work profile.

Also if MobileIron creates the work profile then it can’t find the Google play service so won’t work. Quite the pickle. Not sure how to get past this.

MetropleX

R_MnTnA you can only have one device management app controlling the work profile.

Can you create the work profile with MobileIron?

R_MnTnA

MetropleX Yes, I tried doing that, but once it completes setting up the profile it gives the error:

Generic Google Play services
Error

Google Play services are not available
on this device. Please contact your
administrator to ensure configuration is
correct.

and that is required to continue for configurations and installation of other work apps like Tunnel VPN, etc.

R_MnTnA

MetropleX Do you know of any other way or if it’s possible to install GP Store and its dependencies into the work profile directly from Graphene’s Apps? If not then is there a way to allow the apps in work profile to use GP in the personal profile?

MetropleX

R_MnTnA if using an app like Shelter, to install Play Services, use Shelter to clone our 'Apps' app into the work profile then just open it in the work profile, open the Play Store listing and tap install, the rest takes care of itself. You can then install other apps dependent on GPS into the Work Profile.

R_MnTnA

MetropleX Unfortunately only one Managment app can create a work profile. So if Shelter creates it then MobileIron cannot run it’s installation and vice versa if MI creates the work profile then Shelter won’t work with it.
So as you can see it’s quite the pickle. I can’t put Google play services in the work profile for MobileIron to complete its install of other work apps and certs, etc. I have tried everything I can think of even tried Insular, and tried allowing the MobileIron app all security access to everything in the OS settings, but without the ability to communicate with the GP services in the work profile, MobileIron cannot finish the setup process. If there was only a way or for the work profile to see the GP services in the Personal profile then it might work. Otherwise, I’m afraid any of these enterprise management apps won’t work.