Manually upgrade a project to Sitefinity CMS with a NuGet pack

If you upgrade Sitefinity with the NuGet Package Manager, you have to apply the authentication model manually.

Perform the following:

1. Open the web.config file.
2. Remove obsolete modules.
3. Replace the definition of microsoft.identityModel with system.identityModel and system.identityModel.services.
4. Update microsoft.identityModel with system.IdentityModel.
5. Add bindings of the assemblies with the latest versions.

   Use the following example:

   	<!--Find and remove the following:-->
   	<add name="ClaimsPrincipalHttpModule" type="Microsoft.IdentityModel.Web.ClaimsPrincipalHttpModule, Microsoft.IdentityModel, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" />
   	<add name="SitefinityClaimsAuthenticationModule" type="Telerik.Sitefinity.Security.Claims.SitefinityClaimsAuthenticationModule, Telerik.Sitefinity" />
   	<add name="SessionAuthenticationModule" type="Telerik.Sitefinity.Security.Claims.SitefinitySessionAuthenticationModule, Telerik.Sitefinity" />
   	<!--Inside section <configuration> / <appSettings>, add the following:-->
   	<add key="aspnet:UseTaskFriendlySynchronizationContext" value="true" />
   	<!--Find and delete the following:-->
   	<section requirePermission="false" name="microsoft.identityModel" type="Microsoft.IdentityModel.Configuration.MicrosoftIdentityModelSection, Microsoft.IdentityModel, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" />
   	<!--And replace it with the following:-->
   	<section name="system.identityModel" type="System.IdentityModel.Configuration.SystemIdentityModelSection, System.IdentityModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089" />
   	<section name="system.identityModel.services" type="System.IdentityModel.Services.Configuration.SystemIdentityModelServicesSection, System.IdentityModel.Services, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089" />
   	<!--Find and delete the following:-->
   	<microsoft.identityModel>
   	<service>
   	<claimsAuthenticationManager type="Telerik.Sitefinity.Security.Claims.SFClaimsAuthenticationManager, Telerik.Sitefinity" />
   	<securityTokenHandlers>
   	<add type="Telerik.Sitefinity.Security.Claims.SWT.SWTSecurityTokenHandler, Telerik.Sitefinity" />
   	</securityTokenHandlers>
   	<audienceUris mode="Never" />
   	<federatedAuthentication>
   	<wsFederation passiveRedirectEnabled="true" issuer="http://localhost" realm="http://localhost" requireHttps="false" />
   	<cookieHandler requireSsl="false" />
   	</federatedAuthentication>
   	<issuerNameRegistry type="Telerik.Sitefinity.Security.Claims.CustomIssuerNameRegistry, Telerik.Sitefinity">
   	<trustedIssuers />
   	</issuerNameRegistry>
   	<issuerTokenResolver type="Telerik.Sitefinity.Security.Claims.SWT.WrapIssuerTokenResolver, Telerik.Sitefinity" />
   	</service>
   	</microsoft.identityModel>
   	<!--And replace it with the following:-->
   	<system.identityModel>
   	<identityConfiguration>
   	<securityTokenHandlers>
   	<add type="Telerik.Sitefinity.Security.Claims.SWT.SWTSecurityTokenHandler, Telerik.Sitefinity" />
   	</securityTokenHandlers>
   	<audienceUris mode="Never" />
   	<issuerNameRegistry type="Telerik.Sitefinity.Security.Claims.CustomIssuerNameRegistry, Telerik.Sitefinity">
   	<trustedIssuers />
   	</issuerNameRegistry>
   	<issuerTokenResolver type="Telerik.Sitefinity.Security.Claims.SWT.WrapIssuerTokenResolver, Telerik.Sitefinity" />
   	<certificateValidation certificateValidationMode="None" />
   	</identityConfiguration>
   	</system.identityModel>
   	<system.identityModel.services>
   	<federationConfiguration >
   	<wsFederation passiveRedirectEnabled="true" issuer="http://localhost" realm="http://localhost" requireHttps="false" />
   	<cookieHandler requireSsl="false" />
   	</federationConfiguration>
   	</system.identityModel.services>
   	<!--Add the following bindings:-->
   	<dependentAssembly>
   	<assemblyIdentity name="Telerik.Sitefinity.Mvc" publicKeyToken="b28c218413bdf563" culture="neutral" />
   	<bindingRedirect oldVersion="1.3.350.0" newVersion="1.4.360.0" />
   	</dependentAssembly>
   	<dependentAssembly>
   	<assemblyIdentity name="System.IdentityModel.Tokens.Jwt" publicKeyToken="31bf3856ad364e35" culture="neutral" />
   	<bindingRedirect oldVersion="0.0.0.0-4.0.20622.1351" newVersion="4.0.20622.1351" />
   	</dependentAssembly>
   	<dependentAssembly>
   	<assemblyIdentity name="Microsoft.IdentityModel.Protocol.Extensions" publicKeyToken="31bf3856ad364e35" culture="neutral" />
   	<bindingRedirect oldVersion="0.0.0.0-1.0.2.33" newVersion="1.0.2.33" />
   	</dependentAssembly>
   	<dependentAssembly>
   	<assemblyIdentity name="System.Web.Http" publicKeyToken="31bf3856ad364e35" culture="neutral" />
   	<bindingRedirect oldVersion="0.0.0.0-5.2.3.0" newVersion="5.2.3.0" />
   	</dependentAssembly>
   	<dependentAssembly>
   	<assemblyIdentity name="System.Web.Cors" publicKeyToken="31bf3856ad364e35" culture="neutral" />
   	<bindingRedirect oldVersion="0.0.0.0-5.2.3.0" newVersion="5.2.3.0" />
   	</dependentAssembly>
   	<dependentAssembly>
   	<assemblyIdentity name="System.Net.Http.Formatting" publicKeyToken="31bf3856ad364e35" culture="neutral" />
   	<bindingRedirect oldVersion="0.0.0.0-5.2.3.0" newVersion="5.2.3.0" />
   	</dependentAssembly>
   	<dependentAssembly>
   	<assemblyIdentity name="Microsoft.Owin" publicKeyToken="31bf3856ad364e35" culture="neutral" />
   	<bindingRedirect oldVersion="0.0.0.0-3.0.1.0" newVersion="3.0.1.0" />
   	</dependentAssembly>
   	<dependentAssembly>
   	<assemblyIdentity name="Telerik.Windows.Documents.Flow" publicKeyToken="5803cfa389c90ce7" culture="neutral" />
   	<bindingRedirect oldVersion="0.0.0.0-2015.1.225.40" newVersion="2015.1.225.40" />
   	</dependentAssembly>
   	<dependentAssembly>
   	<assemblyIdentity name="Telerik.Windows.Documents.Core" publicKeyToken="5803cfa389c90ce7" culture="neutral" />
   	<bindingRedirect oldVersion="0.0.0.0-2015.1.225.40" newVersion="2015.1.225.40" />
   	</dependentAssembly>
   	<dependentAssembly>
   	<assemblyIdentity name="Newtonsoft.Json" publicKeyToken="30ad4fe6b2a6aeed" culture="neutral" />
   	<bindingRedirect oldVersion="0.0.0.0-9.0.0.0" newVersion="9.0.0.0" />
   	</dependentAssembly>

   view raw UpgradeNuget_web_config.xml hosted with ❤ by GitHub

   NOTE: XML tags have been changed and have new XPath location. If you have made modifications of attributes, you should update their respective value in the new configuration. These values are used only if you want to keep using WRAP/SWT authentication. They are not used for OpenId Connect authentication.



6. Open the bin folder and remove the following assemblies:
   • Telerik.Sitefinity.MobileAppBuilder.dll
   • Telerik.Sitefinity.DAM.dll
   • Telerik.Sitefinity.EverliveConnector.dll
7. Copy the new ResourcePackages folder. 
   If you have changes in the folder, be careful not to overwrite them.