PosteID (SPID Provider) on GrapheneOS

xplosionmind

Hi all!

I am setting up my Pixel 9 Pro with GrapheneOS, and I can’t make PosteID work. Did anyone manage to make it run correctly?

monogram

xplosionmind Do you have Sandboxed Play Services installed and running?
Here it works on GOS and even on LOS with microG.

didomy

xplosionmind my wife has succeeded to use posteID on her primary profile, while an attempt to install posteID and use it (for another SPID account) on a secondary profile resulted in a fault with a message like yours, and the Integrity API notification. Intergrity API is succeeding in the owner profile, while failing in the secondary? Are you trying on the owner or a secondary profile?

notposteitaliane

xplosionmind
Hi there, Pixel 8 pro here.

I have posteid working.

First installation, february last year, I currently have version 4.12.4 insalled through play store, last update on february 5th.

I can login with fingerprint and use qr correctly.

Permissions given:

Network
Notification
Camera (ask every time)

Compatibility mode is off and all the hardening is defaulted on the most strict policy.

What else?

It is installed in a private space with GSM.
Battery optimisation is on.

xplosionmind

monogram I have Sandboxed Google Play Services v25.40.31 installed and running. I get the Play Integrity API usage notification, too.

DeletedUser557

xplosionmind Unfortunately not. I'm not a programmer so logs don't tell me much. But I don't think it's a specific problem with the Play Integrity API since it works for some users. Could be that it's something with newer models.

Unless someone knowledgeable has a better idea, your best bet is probably contacting the PosteID support.

monogram What models did you test on?

DeletedUser557

Tried installing it on a P8 and got the Play Integrity API usage notification on launch, which probably means Grapheneos is failing the Play Integrity attestation. It's a common problem with banking/EID apps in general, so check out this thread for potential solutions.

xplosionmind

DeletedUser557 I followed the instructions and I still get an error message when opening the app.

Here is the log.

Do you have any idea how to address this?

monogram

xplosionmind
What error is it? Did you try toggling Exploit Compatibility Mode on or off for the app?

monogram

DeletedUser557 What models did you test on?

Pixel 6a on GOS and Oneplus 8 on LOS with microG.

Titan_M2

Do you get any error in the app? What gets you stuck?

xplosionmind

monogram What error is it?

Si è verificato un errore in fase di avvio dell’App. Ti consigliamo di riprovare e di controllare l’eventuale disponibilità sullo store di aggiornamenti dell’App.

I have a “Riprova” button but I get the same error if I click it, over and over again.

monogram Did you try toggling Exploit Compatibility Mode on or off for the app?

I did… 😢

gokuquarto

Do you know some alternatives to PosteId?

xplosionmind

monogram

xplosionmind
As an experiment I uninstalled it and reinstalled it and it throws the same error. I went through the latest reviews on the Google Play Store and a number of users are complaining about that.
Maybe it doesn't have anything to do with Play Integrity and it's just a bug in the app...

boredfridge

This app checks for full google play integrity, and won't work as of now on GOS, as it only passes basic play integrity. The only thing to do is complain to poste, but I don't have high hopes about any results.

gokuquarto

didomy Tried this today and, for me at least, it doesn't work, The same error as reported before appears as well as the Integrity API notification.

naste

I have the same issue here. Please use CieID instead. It works without any problems.

gokuquarto

naste I wonder if it's possibile to use CieID withouth sandboxed playservices after you logged in

capestro

Idk why you all say it doesn't work. It always worked for me on a secondary profile with Google shit enabled, and just double checked it still does as of today with the latest OS and app versions (but I have no Google layer on the owner profile, so maybe the thing is that it works just on one profile out of multiple Google enabled ones?).

monogram

capestro That's true, but if you uninstall it and install it back, chances are it wouldn't work anymore. This means that if you're starting from scratch, it may become a problem.

monogram

gokuquarto I don't think so. I tried it some years ago on a pure vanilla LineageOS setup (no GAPPS and no microG) and it refused to run without Play Services.
However it works great on both GOS with Sandboxed Play Services and LineageOS with microG.