[SuperSU] Vipriel:
I have figured out 2 ways for the S7 to work with PoGo but neither is working with Xposed. I believe the people that are still able to use XPosed are on the older version of SafetyNet and the newest version hasn't been rolled out to their region just yet. I think one way to test this is simply installing the XPosed installer APK. The newest version of SafetyNet detects this APK and you won't be able to pass SafetyNet or play PoGo (you don't need to have Framework or any modules installed, just the presence of the APK is enough to fail). Here is what I found after countless hours of testing:

Option 1 (not ideal):

1-Use latest version of Odin (3.12.3) to flash to a stock ROM. I got the Vietnam one with the G930FXXU1APEQ PDA and G930FOLB1APEQ CSC from SamMobile

2-Download SafetyNet helper and test to see if it's passing (it should). PoGo should work as well.

3-Flash TWRP 3.0.2-4 with Odin (either uncheck the Auto Reboot option within Odin or go into recovery immediately after TWRP is done flashing or default recovery will automatically replace TWRP and you'll have to do this step again).

4-Flash no-verity-opt-encrypt-2.2.zip

5-At this point Data partition is still encrypted (even though it won't automatically re-encrypt after a reboot because of no-verity) so Format it to decrypt it. To format, click on Wipe in TWRP and select the Format Data option.

6-Reboot, download PoGo and SafetyNet helper again. SafetyNet should still pass and PoGo should still work.

7-Flash Magisk v8, followed by phh-superuser-magisk-r259.zip. Reboot.

8-Install Magisk Manager 2.1. Allow root permission for Magisk Manager. Check the box to enable Magisk Hide.

9-Reboot again.

10-At this point, PoGo should still work and SafetyNet should still pass. Magisk is freaking amazing with its hide ability and I believe it even hides itself from Root Switcher. You'll notice that you do not need Root Switcher with this setup and if you do use it, you won't be able to switch it back to "On" after you turn if "Off". Problem with this setup is Xposed. Magisk can hide its own modules, including Phh's Magisk compatible SU but it cannot hide XPosed. I haven't managed to find a working combination here. Neither 86.2 nor 86.6 work. SafetyNet will detect the presence of Xposed intaller APK (even if framework is not installed, just installing the Xposed installer will trip SafetyNet), it will also detect the presence of Xposed whether it's installed through Magisk or not. Even if you don't install the Xposed intaller APK and just flash 86.2, SafetyNet will no longer pass and PoGo won't work. So SafetyNet is balls deep into detecting and blocking Xposed at this time. Root Switch has the ability to toggle off Xposed 86.2 but even that doesn't work!! So no Xposed for now.

Option 2 (my preference):

1-Download and flash the latest Superman ROM (1.15)

2-Do a clean install and In Aroma, select SuperKernel (that's right, select this one even though it's actually Permissive and not Enforcing - I have tried Stock and even though it's enforcing it will not work with the Magisk setup) and Magisk v8 as well as Magisk compatible Phh SU. Do not select Xposed as no matter what, you won't be able to get it to work.

3-Go into Magisk Manager (it will already be installed with this method) and toggle on Magisk Hide. Reboot. Profit. Once again, no Xposed combination possible.

With method #2, even though you are using a Permissive kernel, as long as you have Magisk v8 installed and use the Magisk Hide toggle (along with Phh's Magisk compatible SU), you'll pass SafetyNet and be able to play PoGo. So the claims that ONLY enforcing kernels now work is horse****. I think it's not a matter of whether the kernel is enforcing or permissive but there are other factors involved. For instance, I tried Prometheus kernel and that's permissive as well and couldn't get it to work. I don't know what the difference is.

In some cases, you may not pass SafetyNet right off the bat but after you install Magisk and toggle on the Magisk Hide method, you will be able to. You'll notice neither of the methods above require Root Switch. All root apps should function normally.

One final note is that with the latest SafetyNet update, SuHide does not appear to work. I have tried SuHide 0.55 in many different combinations along with SuperSU 2.78 SR1 and couldn't get things to work. So your best bet right now is Magisk V8 and the hide Magisk toggle. Perhaps Chainfire will figure out why his SuHide no longer works and release a new version.