[{"id":345,"title":"Microsoft Intune G\u00fcvenlik Duvar\u0131 Kurallar\u0131: Gizli Y\u00f6netim ve \u00c7\u00f6z\u00fcm Y\u00f6ntemleri","content":"<p>Microsoft Intune &uuml;zerinden olu\u015fturulan g&uuml;venlik duvar\u0131 kurallar\u0131n\u0131n Windows Firewall (WF.msc) konsolunda g&ouml;r&uuml;nmemesi, bir&ccedil;ok sistem y&ouml;neticisi i&ccedil;in kafa kar\u0131\u015ft\u0131r\u0131c\u0131 bir durum olu\u015fturmaktad\u0131r. Bu durum, Active Directory GPO'lar\u0131ndan farkl\u0131 olarak, Intune'un arka planda sessizce &ccedil;al\u0131\u015fmas\u0131ndan kaynaklanmaktad\u0131r.<\/p>\n<h2>Kar\u015f\u0131la\u015ft\u0131rmal\u0131 Analiz<\/h2>\n<h3>Active Directory GPO vs Intune<\/h3>\n<table>\n<thead>\n<tr>\n<th><strong>&Ouml;zellik<\/strong><\/th>\n<th><strong>Active Directory GPO<\/strong><\/th>\n<th><strong>Microsoft Intune<\/strong><\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>G&ouml;r&uuml;n&uuml;rl&uuml;k<\/strong><\/td>\n<td>WF konsolunda \"Group Policy taraf\u0131ndan y&ouml;netiliyor\" uyar\u0131s\u0131<\/td>\n<td>Hi&ccedil;bir g&ouml;rsel i\u015faret yok<\/td>\n<\/tr>\n<tr>\n<td><strong>Y&ouml;netim<\/strong><\/td>\n<td>Merkezi ve g&ouml;r&uuml;n&uuml;r<\/td>\n<td>Arka planda sessiz<\/td>\n<\/tr>\n<tr>\n<td><strong>Kontrol<\/strong><\/td>\n<td>GPMC &uuml;zerinden<\/td>\n<td>Intune portal &uuml;zerinden<\/td>\n<\/tr>\n<tr>\n<td><strong>Tespit<\/strong><\/td>\n<td>Kolay fark edilir<\/td>\n<td>PowerShell\/Registry gerektirir<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Intune G&uuml;venlik Duvar\u0131 Kurallar\u0131n\u0131 Tespit Etme Y&ouml;ntemleri<\/h2>\n<h3>1. Registry Kontrol&uuml;<\/h3>\n<pre><code class=\"language-powershell\"># Registry anahtar\u0131n\u0131 kontrol edin\nreg query \"HKLM\\SYSTEM\\CurrentControlSet\\Services\\SharedAccess\\Parameters\\FirewallPolicy\\Mdm\"\n<\/code><\/pre>\n<h3>2. PowerShell ile Sorgulama<\/h3>\n<pre><code class=\"language-powershell\"># T&uuml;m Intune kurallar\u0131n\u0131 listele\nGet-NetFirewallRule -PolicyStore ActiveStore | \n    Where-Object {$_.DisplayName -like \"*Intune*\"} | \n    Format-Table DisplayName, Enabled, Direction, Action\n\n# Detayl\u0131 bilgi i&ccedil;in\nGet-NetFirewallRule -PolicyStore ActiveStore | \n    Where-Object {$_.DisplayName -like \"*YOUR_RULE_NAME*\"} | \n    Format-List *\n<\/code><\/pre>\n<h3>3. Geli\u015fmi\u015f PowerShell Script<\/h3>\n<pre><code class=\"language-powershell\"># Intune MDM kurallar\u0131n\u0131 tespit eden script\nfunction Get-IntuneManagedFirewallRules {\n    $allRules = Get-NetFirewallRule -PolicyStore ActiveStore\n    $intunRules = @()\n    \n    foreach ($rule in $allRules) {\n        $ruleDetails = Get-NetFirewallRule -Name $rule.Name -PolicyStore ActiveStore\n        if ($ruleDetails.PolicyStoreSource -eq \"GroupPolicy\" -or \n            $ruleDetails.DisplayName -match \"MDM\" -or\n            $ruleDetails.Owner -match \"S-1-5-84-0-0-0-0-0\") {\n            $intunRules += $ruleDetails\n        }\n    }\n    \n    return $intunRules | Select-Object DisplayName, Direction, Action, Enabled, Profile\n}\n\n# Kullan\u0131m\nGet-IntuneManagedFirewallRules | Format-Table -AutoSize\n<\/code><\/pre>\n<h2>Di\u011fer Intune S\u0131n\u0131rlamalar\u0131 ve &Ccedil;&ouml;z&uuml;mleri<\/h2>\n<h3>1. <strong>BitLocker Y&ouml;netimi<\/strong><\/h3>\n<ul>\n<li><strong>Sorun<\/strong>: BitLocker recovery anahtarlar\u0131 bazen Azure AD'ye y&uuml;klenmez<\/li>\n<li><strong>&Ccedil;&ouml;z&uuml;m<\/strong>: Backup retry policy'leri yap\u0131land\u0131r\u0131n<\/li>\n<\/ul>\n<h3>2. <strong>Win32 App Deployment<\/strong><\/h3>\n<ul>\n<li><strong>Sorun<\/strong>: 100MB &uuml;zeri uygulamalar i&ccedil;in timeout sorunlar\u0131<\/li>\n<li><strong>&Ccedil;&ouml;z&uuml;m<\/strong>: Content caching ve peer-to-peer da\u011f\u0131t\u0131m kullan\u0131n<\/li>\n<\/ul>\n<h3>3. <strong>Compliance Policy Gecikmeleri<\/strong><\/h3>\n<ul>\n<li><strong>Sorun<\/strong>: Politika de\u011fi\u015fikliklerinin cihazlara yans\u0131mas\u0131 8 saate kadar s&uuml;rebilir<\/li>\n<li><strong>&Ccedil;&ouml;z&uuml;m<\/strong>: Sync komutunu manuel tetikleyin<\/li>\n<\/ul>\n<h3>4. <strong>Registry De\u011fi\u015fiklikleri<\/strong><\/h3>\n<ul>\n<li><strong>Sorun<\/strong>: Kompleks registry ayarlar\u0131 i&ccedil;in s\u0131n\u0131rl\u0131 GUI deste\u011fi<\/li>\n<li><strong>&Ccedil;&ouml;z&uuml;m<\/strong>: Custom OMA-URI politikalar\u0131 kullan\u0131n<\/li>\n<\/ul>\n<h2>En \u0130yi Uygulamalar<\/h2>\n<h3>Monitoring ve D&ouml;k&uuml;mantasyon<\/h3>\n<ol>\n<li>\n<p><strong>Kural \u0130simlendirme Standard\u0131<\/strong><\/p>\n<pre><code>INTUNE-[Departman]-[Kural Tipi]-[Tarih]\n&Ouml;rnek: INTUNE-IT-BlockPort445-2024\n<\/code><\/pre>\n<\/li>\n<li>\n<p><strong>D&uuml;zenli Denetim Script'i<\/strong><\/p>\n<pre><code class=\"language-powershell\"># Haftal\u0131k kontrol i&ccedil;in zamanlanm\u0131\u015f g&ouml;rev\n$rules = Get-NetFirewallRule -PolicyStore ActiveStore\n$report = @()\n\nforeach ($rule in $rules) {\n    $report += [PSCustomObject]@{\n        Name = $rule.DisplayName\n        Source = $rule.PolicyStoreSource\n        Enabled = $rule.Enabled\n        LastModified = (Get-Item \"HKLM:\\SYSTEM\\CurrentControlSet\\Services\\SharedAccess\\Parameters\\FirewallPolicy\\FirewallRules\").LastWriteTime\n    }\n}\n\n$report | Export-Csv \"C:\\FirewallAudit\\Weekly_Report_$(Get-Date -Format 'yyyyMMdd').csv\"\n<\/code><\/pre>\n<\/li>\n<\/ol>\n<h3>Troubleshooting Ara&ccedil;lar\u0131<\/h3>\n<ol>\n<li>\n<p><strong>Intune Connectivity Test<\/strong><\/p>\n<pre><code class=\"language-powershell\"># Intune ba\u011flant\u0131s\u0131n\u0131 kontrol et\nTest-NetConnection -ComputerName manage.microsoft.com -Port 443\n<\/code><\/pre>\n<\/li>\n<li>\n<p><strong>MDM Log Analizi<\/strong><\/p>\n<pre><code class=\"language-powershell\"># MDM loglar\u0131n\u0131 topla\nGet-WinEvent -LogName \"Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider\/Admin\" | \n    Where-Object {$_.Message -like \"*Firewall*\"} | \n    Select-Object TimeCreated, Message | \n    Format-Table -Wrap\n<\/code><\/pre>\n<\/li>\n<\/ol>\n<h2>G&ouml;r&uuml;nmezlik Sorununun &Ccedil;&ouml;z&uuml;m&uuml;<\/h2>\n<h3>&Ouml;nerilen Yakla\u015f\u0131m:<\/h3>\n<ol>\n<li><strong>Custom Monitoring Dashboard<\/strong>: PowerBI veya Azure Monitor kullanarak Intune kurallar\u0131n\u0131 g&ouml;rselle\u015ftirin<\/li>\n<li><strong>Documentation Automation<\/strong>: Kurallar\u0131 otomatik olarak belgeleyecek scriptler olu\u015fturun<\/li>\n<li><strong>Change Tracking<\/strong>: Azure Automation ile de\u011fi\u015fiklikleri takip edin<\/li>\n<\/ol>\n<p>Intune'un g&uuml;venlik duvar\u0131 kurallar\u0131n\u0131 \"gizli\" y&ouml;netmesi, modern endpoint management'\u0131n bir par&ccedil;as\u0131 olsa da, IT y&ouml;neticileri i&ccedil;in \u015feffafl\u0131k eksikli\u011fi olu\u015fturmaktad\u0131r. PowerShell ve registry ara&ccedil;lar\u0131n\u0131 kullanarak bu kurallar\u0131 g&ouml;r&uuml;n&uuml;r hale getirmek, etkili g&uuml;venlik y&ouml;netimi i&ccedil;in kritiktir.<\/p>\n<p><strong>Pro \u0130pucu<\/strong>: Intune'da her kural de\u011fi\u015fikli\u011finde otomatik olarak belgeleme yapacak bir Azure Function olu\u015fturarak, tam bir audit trail sa\u011flayabilirsiniz.<\/p>","excerpt":"Microsoft Intune \u00fczerinden olu\u015fturulan g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131n Windows Firewall (WF.msc) konsolunda g\u00f6r\u00fcnmemesi, bir\u00e7ok sistem y\u00f6neticisi i\u00e7in kafa kar\u0131\u015ft\u0131r\u0131c\u0131 bir durum olu\u015fturmaktad\u0131r. Bu durum, Active Directory GPO'lar\u0131ndan farkl\u0131 olarak, Intune'un arka planda sessizce \u00e7al\u0131\u015fmas\u0131ndan kaynaklanmaktad\u0131r.","created_at":"2025-11-26 16:07:06","updated_at":"2026-09-23 11:38:34","category_id":6,"view_count":530,"reading_time":4,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-11-26 13:07:00","featured_image":"e88c6daab6d39157295f75cc0fce3bf3.jpg","slug":"microsoft-intune-guvenlik-duvari-kurallari-gizli-yonetim-ve-cozum-yontemleri","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"},{"id":75,"title":"Office 365 Kullan\u0131c\u0131 ve Eri\u015fim Y\u00f6netimi Azure Active Directory","content":"Modern kurumlar, Microsoft 365 (eski ad\u0131yla Office 365) gibi bulut tabanl\u0131 platformlarda <strong>kullan\u0131c\u0131 rolleri ve izinleri y\u00f6netimi <\/strong>yaparken hem <strong>g\u00fcvenli\u011fi <\/strong>hem de <strong>esnekli\u011fi <\/strong>sa\u011flayacak merkezi bir \u00e7\u00f6z\u00fcm gerektirir. Bu ba\u011flamda <strong>Azure Active Directory (Azure AD) <\/strong>, kullan\u0131c\u0131 kimliklerini merkezi olarak y\u00f6netmek, rol tabanl\u0131 eri\u015fim kontrol\u00fc (RBAC) sa\u011flamak ve g\u00fcvenlik politikalar\u0131n\u0131 uygulamak i\u00e7in en g\u00fc\u00e7l\u00fc ara\u00e7t\u0131r. Bu yaz\u0131da, Azure AD'nin neden Office 365 ortamlar\u0131nda kullan\u0131c\u0131 ve eri\u015fim y\u00f6netimi i\u00e7in en uygun \u00e7\u00f6z\u00fcm; <h3><strong data-spm-anchor->Azure AD Nedir?<\/strong><\/h3> Azure AD, Microsoft\u2019un sundu\u011fu <strong>bulut tabanl\u0131 kimlik ve eri\u015fim y\u00f6netimi (IAM) <\/strong>hizmetidir. Temel i\u015flevleri \u015funlard\u0131r: <ul> <li><strong>Kullan\u0131c\u0131 ve grup y\u00f6netimi: <\/strong>Kullan\u0131c\u0131 hesaplar\u0131, gruplar ve rolleri olu\u015fturup y\u00f6netme.<\/li> <li><strong>Rol Tabanl\u0131 Eri\u015fim Kontrol\u00fc (RBAC): <\/strong>Kullan\u0131c\u0131lara yaln\u0131zca ihtiya\u00e7 duyduklar\u0131 izinleri verme.<\/li> <li><strong>Tek Oturum A\u00e7ma (SSO): <\/strong>Kullan\u0131c\u0131lar\u0131n birden fazla uygulamada tek bir kimlikle oturum a\u00e7mas\u0131n\u0131 sa\u011flama.<\/li> <li><strong>Ko\u015fullu Eri\u015fim (Conditional Access): <\/strong>G\u00fcvenlik politikalar\u0131na g\u00f6re eri\u015fimi denetleme.<\/li> <li><strong>G\u00fcvenlik ve Uyumluluk: <\/strong>Riskli oturumlar\u0131 tespit etme ve koruma sa\u011flama.<\/li> <\/ul> <div ><\/div> Azure AD, Microsoft 365 (Office 365), Azure ve di\u011fer Microsoft hizmetleriyle derin entegrasyona sahiptir. <h3><strong data-spm-anchor->Neden Azure AD Tercih Edilmelidir?<\/strong><\/h3> <h4><strong>Merkezi Kimlik Y\u00f6netimi<\/strong><\/h4> <ul data-spm-anchor-> <li>Azure AD, kullan\u0131c\u0131lar\u0131, gruplar\u0131 ve rolleri tek bir konsoldan y\u00f6netmenizi sa\u011flar.<\/li> <li><strong>\u015eirket i\u00e7i Active Directory ile e\u015fitleme: <\/strong>Azure AD Connect arac\u0131yla \u015firket i\u00e7i AD\u2019yi Azure AD ile senkronize ederek <strong>\u00e7ift y\u00f6netim <\/strong>ihtiyac\u0131n\u0131 ortadan kald\u0131r\u0131r.<\/li> <\/ul> <div ><\/div> <h4><strong>Rol Tabanl\u0131 Eri\u015fim Kontrol\u00fc (RBAC)<\/strong><\/h4> <ul> <li>Azure AD, kullan\u0131c\u0131lar\u0131 belirli rollerle ili\u015fkilendirerek <strong>en az ayr\u0131cal\u0131k ilkesi <\/strong>(least privilege)\u2019ne uygun eri\u015fim sa\u011flar. <ul> <li><strong>\u00d6rnek Roller:<\/strong> <ul> <li><strong>Global Admin: <\/strong>T\u00fcm kaynaklara tam eri\u015fim.<\/li> <li><strong>Exchange Online Admin: <\/strong>E-posta yap\u0131land\u0131rmalar\u0131 i\u00e7in s\u0131n\u0131rl\u0131 eri\u015fim.<\/li> <li><strong>Uygulama Y\u00f6neticisi: <\/strong>Yaln\u0131zca belirli uygulamalar\u0131 y\u00f6netme.<\/li> <\/ul> <\/li> <\/ul> <div ><\/div><\/li> <li>Bu yap\u0131, izinlerin <strong>gruplara veya tekil kullan\u0131c\u0131lara <\/strong>kolayca atanmas\u0131n\u0131 sa\u011flar.<\/li> <\/ul> <h4><strong data-spm-anchor->Ko\u015fullu Eri\u015fim Politikalar\u0131<\/strong><\/h4> <ul> <li>Azure AD, kullan\u0131c\u0131lar\u0131n eri\u015fimini <strong>ko\u015fullara <\/strong>g\u00f6re k\u0131s\u0131tlamak i\u00e7in g\u00fc\u00e7l\u00fc bir ara\u00e7 sunar. <ul> <li data-spm-anchor-><strong>\u00d6rnek Politikalar:<\/strong> <ul> <li>Belirli bir co\u011frafi konumdan giri\u015f yapan kullan\u0131c\u0131lar\u0131 engelle.<\/li> <li>Uyumsuz cihazlardan eri\u015fimi k\u0131s\u0131tla.<\/li> <li>Riskli oturum a\u00e7ma giri\u015fimlerinde Multi-Factor Authentication (MFA) zorunlulu\u011fu.<\/li> <\/ul> <\/li> <\/ul> <div ><\/div><\/li> <li>Bu politikalar, Microsoft Defender for Cloud Apps ve Azure AD Identity Protection ile entegre \u00e7al\u0131\u015f\u0131r.<\/li> <\/ul> <h4><strong data-spm-anchor->Tek Oturum A\u00e7ma (Single Sign-On - SSO)<\/strong><\/h4> <ul> <li data-spm-anchor->Azure AD, kullan\u0131c\u0131lar\u0131n <strong>tek bir kimlikle <\/strong>Office 365, Azure, Salesforce, Dropbox gibi binlerce uygulamaya eri\u015fmesine olanak tan\u0131r.<\/li> <li><strong>Faydalar\u0131:<\/strong> <ul> <li>Kullan\u0131c\u0131 deneyimini iyile\u015ftirir.<\/li> <li>Parola y\u00f6netimi zorlu\u011funu azalt\u0131r.<\/li> <li>G\u00fcvenli\u011fi art\u0131r\u0131r (\u00f6rne\u011fin, MFA entegrasyonu).<\/li> <\/ul> <\/li> <\/ul> <h4><strong>Otomatik Kullan\u0131c\u0131 Sa\u011flama ve Y\u00f6netimi<\/strong><\/h4> <ul> <li>Azure AD, kullan\u0131c\u0131lar\u0131n <strong>otomatik olarak olu\u015fturulmas\u0131n\u0131 ve kald\u0131r\u0131lmas\u0131n\u0131 <\/strong>sa\u011flar. <ul> <li><strong>\u00d6rnek:<\/strong> <ul> <li>Bir kullan\u0131c\u0131 \u015firketten ayr\u0131ld\u0131\u011f\u0131nda, Azure AD ile t\u00fcm Office 365 hizmetlerinden eri\u015fimi otomatik olarak kald\u0131r\u0131l\u0131r.<\/li> <\/ul> <\/li> <\/ul> <div ><\/div><\/li> <li>Bu s\u00fcre\u00e7, <strong>PowerShell <\/strong>veya <strong>Microsoft Graph API <\/strong>ile \u00f6zelle\u015ftirilebilir.<\/li> <\/ul> <h4><strong data-spm-anchor->G\u00fcvenlik ve Uyumluluk<\/strong><\/h4> <ul> <li data-spm-anchor->Azure AD, Microsoft\u2019un sundu\u011fu <strong>ileri d\u00fczey g\u00fcvenlik \u00f6zellikleri <\/strong>ile kullan\u0131c\u0131lar\u0131 ve kaynaklar\u0131 korur: <ul> <li><strong>Identity Protection: <\/strong>Riskli oturum a\u00e7ma giri\u015fimlerini tespit eder ve engeller.<\/li> <li><strong>Privileged Identity Management (PIM): <\/strong>Kritik rollerin (\u00f6rne\u011fin, Global Admin) yaln\u0131zca ihtiya\u00e7 duyuldu\u011funda kullan\u0131lmas\u0131na olanak tan\u0131r.<\/li> <li><strong>Denetim ve Loglama: <\/strong>Kullan\u0131c\u0131 etkinliklerini <strong>Azure Monitor <\/strong>veya <strong>Microsoft Purview Compliance Center <\/strong>ile izleyebilirsiniz. <h3><\/h3> <h3><strong data-spm-anchor->Azure AD Alternatiflerinin S\u0131n\u0131rl\u0131l\u0131klar\u0131<\/strong><\/h3> <div > <div > <table > <thead > <tr > <th  scope=\"col\"> <div ><strong>Alternatif<\/strong><\/div><\/th> <th  scope=\"col\"> <div ><strong>S\u0131n\u0131rl\u0131l\u0131klar<\/strong><\/div><\/th> <\/tr> <\/thead> <tbody> <tr > <td > <div ><strong>Manuel \u0130zni Y\u00f6netme<\/strong><\/div><\/td> <td > <div >Zaman al\u0131c\u0131d\u0131r, hata riski y\u00fcksektir, \u00f6l\u00e7eklenebilir de\u011fildir.<\/div><\/td> <\/tr> <tr > <td > <div ><strong>Yaln\u0131zca Office 365 Gruplar\u0131<\/strong><\/div><\/td> <td > <div >Rol bazl\u0131 de\u011fil, kaynak baz\u0131nda izin verir. Karma\u015f\u0131k senaryolarda yetersiz kal\u0131r.<\/div><\/td> <\/tr> <tr > <td > <div ><strong>Office 365 Admin Merkezi<\/strong><\/div><\/td> <td > <div >Temel d\u00fczey izin y\u00f6netimi sa\u011flar, ancak geli\u015fmi\u015f g\u00fcvenlik ve otomasyon yoktur.<\/div><\/td> <\/tr> <\/tbody> <\/table> <\/div> <\/div> &nbsp;<\/li> <\/ul> <\/li> <\/ul> <h3><strong data-spm-anchor->Azure AD ile Kullan\u0131c\u0131 ve Rol Y\u00f6netimi Ad\u0131mlar\u0131<\/strong><\/h3> <h4><strong data-spm-anchor->Rol Atamas\u0131 Yapma<\/strong><\/h4> <ol start=\"1\"> <li>Azure Portal\u2019a giri\u015f yap\u0131n.<\/li> <li><strong>\"Kullan\u0131c\u0131lar\" &gt; \"T\u00fcm kullan\u0131c\u0131lar\" <\/strong>b\u00f6l\u00fcm\u00fcne gidin.<\/li> <li>Hedef kullan\u0131c\u0131ya <strong>\"Roller\" <\/strong>atay\u0131n (\u00f6rne\u011fin, \"Exchange Online Admin\").<\/li> <li>Gerekti\u011finde \u00f6zel roller olu\u015fturabilirsiniz.<\/li> <\/ol> <div ><\/div> <h4><strong>Ko\u015fullu Eri\u015fim Politikas\u0131 Olu\u015fturma<\/strong><\/h4> <ol start=\"1\"> <li>Azure Portal\u2019dan <strong>\"Azure AD\" &gt; \"Ko\u015fullu Eri\u015fim\" <\/strong>b\u00f6l\u00fcm\u00fcne gidin.<\/li> <li>Yeni bir politika olu\u015fturun: <ul> <li><strong>Kapsam: <\/strong>Belirli kullan\u0131c\u0131lar veya gruplar.<\/li> <li><strong>Ko\u015fullar: <\/strong>Konum, cihaz t\u00fcr\u00fc, risk seviyesi.<\/li> <li><strong>Eylemler: <\/strong>MFA zorunlulu\u011fu, eri\u015fim reddi veya oturumu sorgulama.<\/li> <\/ul> <\/li> <\/ol> <div ><\/div> <h4><strong>Otomatik Kullan\u0131c\u0131 Sa\u011flama<\/strong><\/h4> <ol start=\"1\"> <li>Azure Portal\u2019dan <strong>\"Enterprise Applications\" <\/strong>b\u00f6l\u00fcm\u00fcne gidin.<\/li> <li>Hedef uygulama (\u00f6rne\u011fin, Office 365) i\u00e7in <strong>\"Automatic User Provisioning\" <\/strong>se\u00e7ene\u011fini etkinle\u015ftirin.<\/li> <li>E\u015fitleme kurallar\u0131n\u0131 yap\u0131land\u0131r\u0131n.<\/li> <\/ol> <div > <h3><strong>Troubleshooting \/ Sorun giderme:<\/strong><\/h3> <div > <div ><\/div> <\/div> <\/div> <div > <div > <table > <thead > <tr > <th  scope=\"col\"> <div ><strong>Soru<\/strong><\/div><\/th> <th  scope=\"col\"> <div ><strong>\u00c7\u00f6z\u00fcm<\/strong><\/div><\/th> <\/tr> <\/thead> <tbody> <tr > <td > <div ><strong>Kullan\u0131c\u0131 Gereksiz Rol Al\u0131yor Mu?<\/strong><\/div><\/td> <td > <div >Azure AD'de<strong>Access Reviews<\/strong>\u00f6zelli\u011fini kullanarak rolleri d\u00fczenli olarak g\u00f6zden ge\u00e7irin.<\/div><\/td> <\/tr> <tr > <td > <div ><strong>Ko\u015fullu Eri\u015fim Politikas\u0131 Etkisiz Kal\u0131yor Mu?<\/strong><\/div><\/td> <td > <div >Politikan\u0131n kullan\u0131c\u0131lar\u0131, ko\u015fullar\u0131 ve eylemlerini kontrol edin.<\/div><\/td> <\/tr> <tr > <td > <div ><strong>Otomatik Kullan\u0131c\u0131 Sa\u011flama Ba\u015far\u0131s\u0131z Oluyor Mu?<\/strong><\/div><\/td> <td > <div >Azure AD Connect\u2019in durumunu ve e\u015fitleme kurallar\u0131n\u0131 g\u00f6zden ge\u00e7irin.<\/div><\/td> <\/tr> <tr > <td > <div ><strong>SSO \u00c7al\u0131\u015fm\u0131yor Mu?<\/strong><\/div><\/td> <td > <div >Uygulama yap\u0131land\u0131rmas\u0131, kullan\u0131c\u0131 atamalar\u0131 ve cihaz uyumlulu\u011funu kontrol edin.<\/div><\/td> <\/tr> <\/tbody> <\/table> <\/div> <p data-spm-anchor->Azure Active Directory, Microsoft 365 (Office 365) ortamlar\u0131nda kullan\u0131c\u0131 ve eri\u015fim y\u00f6netimi i\u00e7in <strong>merkezi, g\u00fcvenli ve \u00f6l\u00e7eklenebilir <\/strong>bir \u00e7\u00f6z\u00fcm sunar. Rol tabanl\u0131 eri\u015fim kontrol\u00fc, ko\u015fullu eri\u015fim politikalar\u0131, tek oturum a\u00e7ma (SSO) ve otomatik kullan\u0131c\u0131 sa\u011flama gibi \u00f6zellikler, g\u00fcvenlik risklerini azalt\u0131rken y\u00f6netim maliyetlerini d\u00fc\u015f\u00fcr\u00fcr. Manuel izin y\u00f6netimi veya s\u0131n\u0131rl\u0131 yetkilendirme sunan alternatif y\u00f6ntemler, karma\u015f\u0131k ve g\u00fcvensiz yap\u0131lar yarat\u0131r. Azure AD ile kurumlar, kullan\u0131c\u0131 rollerini etkili bir \u015fekilde y\u00f6netebilir ve g\u00fcvenlik standartlar\u0131n\u0131 koruyabilir. Azure AD ile <strong>Microsoft Defender for Office 365 <\/strong>gibi g\u00fcvenlik \u00e7\u00f6z\u00fcmlerini entegre ederek e-posta g\u00fcvenli\u011fini de art\u0131rabilirsiniz.<\/p> <\/div>","excerpt":"Modern kurumlar, Microsoft 365 (eski ad\u0131yla Office 365) gibi bulut tabanl\u0131 platformlarda kullan\u0131c\u0131 rolleri ve izinleri y\u00f6netimi yaparken hem...","created_at":"2025-05-01 14:30:56","updated_at":"2026-09-07 01:00:33","category_id":8,"view_count":775,"reading_time":6,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-05-01 14:30:56","featured_image":"resimyok.jpg","slug":"office-365-kullanici-ve-erisim-yonetimi-azure-active-directory","category_name":"Active Directory \/Azure","category_slug":"active-directory-azure","category_color":"#f59e0b"},{"id":86,"title":"Azure Key Vault Nedir?","content":"Bulut bili\u015fimde hassas verilerin g\u00fcvenli bir \u015fekilde saklanmas\u0131 ve y\u00f6netilmesi, modern uygulama geli\u015ftirme ve sistem y\u00f6netimi i\u00e7in hayati \u00f6neme sahiptir. Microsoft Azure\u2019un sundu\u011fu Azure Key Vault , bu ihtiya\u00e7lara \u00e7\u00f6z\u00fcm sunan g\u00fc\u00e7l\u00fc bir hizmettir. Ancak, Key Vault i\u00e7indeki <strong data-spm-anchor->Secrets<\/strong>, <strong data-spm-anchor->Keys <\/strong>ve <strong data-spm-anchor->Certificates <\/strong>eri\u015fimi kontrol etmek i\u00e7in do\u011fru yap\u0131land\u0131rmalar\u0131n yap\u0131lmas\u0131 gerekmektedir. Bu yaz\u0131da, Azure Key Vault'ta eri\u015fim kontrol\u00fc i\u00e7in en yayg\u0131n y\u00f6ntem olan Eri\u015fim Politikalar\u0131 (Access Policies) bilgi verece\u011fim; Azure Key Vault, uygulamalar, hizmetler ve sistemler i\u00e7in gerekli olan hassas verilerin (parolalar, API anahtarlar\u0131, sertifikalar, \u015fifreleme anahtarlar\u0131 vb.) g\u00fcvenli bir \u015fekilde saklanmas\u0131n\u0131 ve eri\u015fimini sa\u011flar. Temel olarak \u00fc\u00e7 ana bile\u015feni vard\u0131r: <ul data-spm-anchor-> <li><strong data-spm-anchor->Secrets: <\/strong>Parolalar, ba\u011flant\u0131 dizeleri gibi metin veya ikili veriler.<\/li> <li><strong data-spm-anchor->Keys: <\/strong>\u015eifreleme i\u015flemleri i\u00e7in kullan\u0131lan asimetrik veya simetrik anahtarlar.<\/li> <li><strong data-spm-anchor->Certificates: <\/strong>SSL\/TLS sertifikalar\u0131 ve ili\u015fkili \u00f6zel anahtarlar.<\/li> <\/ul> <div ><\/div> Key Vault, bu \u00f6\u011felere eri\u015fimi s\u0131n\u0131rlamak ve denetlemek i\u00e7in iki ana y\u00f6ntem sunar: <strong>Eri\u015fim Politikalar\u0131 (Access Policies) <\/strong>ve <strong data-spm-anchor->Rol Tabanl\u0131 Eri\u015fim Kontrol\u00fc (RBAC - Role-Based Access Control)<\/strong> <h3><strong>Access Policies Nedir?<\/strong><\/h3> Eri\u015fim Politikalar\u0131, Azure Key Vault\u2019ta s\u0131rlar, anahtarlar ve sertifikalara eri\u015fimi tan\u0131mlamak i\u00e7in kullan\u0131lan temel yap\u0131land\u0131rma y\u00f6ntemidir. Her bir politika a\u015fa\u011f\u0131daki bile\u015fenleri i\u00e7erir: <ol start=\"1\"> <li><strong>Kimlik (Identity): <\/strong>Kullan\u0131c\u0131, servis sorumlusu (service principal) veya uygulama gibi Azure Active Directory'de tan\u0131ml\u0131 bir kimlik.<\/li> <li><strong>\u0130zinler (Permissions): <\/strong>Bu kimli\u011fin Key Vault \u00f6\u011feleri \u00fczerinde hangi i\u015flemleri yapabilece\u011fini belirler. <ul> <li><strong>Secrets i\u00e7in: <\/strong>Get, List, Set, Delete, Recover, Backup, Restore<\/li> <li><strong>Keys i\u00e7in: <\/strong>Get, List, Create, Update, Delete, Recover, Backup, Restore<\/li> <li><strong>Certificates i\u00e7in: <\/strong>Get, List, Delete, Create, Import, Update, Manage Contacts, Manage Issuers<\/li> <\/ul> <\/li> <\/ol> <div ><\/div> <p data-spm-anchor->Eri\u015fim politikalar\u0131, do\u011frudan Key Vault d\u00fczeyinde tan\u0131mlan\u0131r ve her bir \u00f6\u011fe i\u00e7in ayr\u0131 ayr\u0131 yap\u0131land\u0131r\u0131labilir.<\/p> <h3 data-spm-anchor-><strong data-spm-anchor->Eri\u015fim Politikalar\u0131 Nas\u0131l \u00c7al\u0131\u015f\u0131r?<\/strong><\/h3> Eri\u015fim politikalar\u0131, Azure Key Vault\u2019ta izin y\u00f6netimini \u015fu \u015fekilde sa\u011flar: <h4><strong>A. Kimli\u011fe Dayal\u0131 Eri\u015fim<\/strong><\/h4> <ul> <li>Eri\u015fim politikalar\u0131, belirli bir Azure AD kimli\u011fi (kullan\u0131c\u0131, uygulama veya grup) i\u00e7in tan\u0131mlan\u0131r.<\/li> <li>\u00d6rne\u011fin, bir geli\u015ftiriciye yaln\u0131zca s\u0131rlar\u0131 okuma izni verebilirsiniz.<\/li> <\/ul> <h4><strong>B. \u00d6\u011fe Seviyesinde \u0130zin Y\u00f6netimi<\/strong><\/h4> <ul> <li>S\u0131rlar, anahtarlar ve sertifikalar i\u00e7in ayr\u0131 ayr\u0131 izinler tan\u0131mlanabilir.<\/li> <li>\u00d6rne\u011fin, bir uygulaman\u0131n yaln\u0131zca s\u0131rlar\u0131 okumasine izin verilirken, bir g\u00fcvenlik grubunun anahtarlar\u0131 y\u00f6netmesine izin verilebilir.<\/li> <\/ul> <h4 data-spm-anchor-><strong data-spm-anchor->C. Hiyerar\u015fik Yap\u0131<\/strong><\/h4> <ul> <li>Bir Key Vault'a tan\u0131mlanan t\u00fcm eri\u015fim politikalar\u0131, o Vault i\u00e7indeki t\u00fcm \u00f6\u011felere uygulan\u0131r.<\/li> <li>Ancak, her \u00f6\u011fe i\u00e7in farkl\u0131 izin kombinasyonlar\u0131 tan\u0131mlanabilir.<\/li> <\/ul> <h4><strong>D. Eri\u015fim Kontrol\u00fc ve G\u00fcvenlik<\/strong><\/h4> <ul> <li>Eri\u015fim politikalar\u0131, Azure AD kimlik do\u011frulama mekanizmalar\u0131yla entegredir.<\/li> <li>Kimlik do\u011frulamas\u0131 ba\u015far\u0131l\u0131 olana g\u00f6re, ilgili izinler uygulan\u0131r.<\/li> <\/ul> <h3><strong data-spm-anchor->Eri\u015fim Politikalar\u0131 vs. Azure RBAC<\/strong><\/h3> <p data-spm-anchor->Azure Key Vault\u2019ta eri\u015fim kontrol\u00fc i\u00e7in iki ana y\u00f6ntem vard\u0131r:<\/p> <div ><\/div> <div > <div > <table > <thead > <tr > <th  scope=\"col\"> <div >\u00d6zellik<\/div><\/th> <th  scope=\"col\"> <div ><strong>Eri\u015fim Politikalar\u0131 (Access Policies)<\/strong><\/div><\/th> <th  scope=\"col\"> <div ><strong>Azure RBAC<\/strong><\/div><\/th> <\/tr> <\/thead> <tbody> <tr > <td > <div ><strong>Kapsam<\/strong><\/div><\/td> <td  data-spm-anchor-> <div >Key Vault seviyesinde tan\u0131mlan\u0131r<\/div><\/td> <td > <div >Abonelik veya kaynak grubu seviyesinde tan\u0131mlanabilir<\/div><\/td> <\/tr> <tr > <td > <div ><strong>\u0130zinlerin Tan\u0131m\u0131<\/strong><\/div><\/td> <td > <div >Secret, keys ve sertifikalar i\u00e7in ayr\u0131 ayr\u0131 yap\u0131land\u0131r\u0131labilir<\/div><\/td> <td > <div >Rol bazl\u0131 genel izinler sunar (\u00f6rne\u011fin, Key Vault Contributor)<\/div><\/td> <\/tr> <tr > <td > <div ><strong>Kullan\u0131m Kolayl\u0131\u011f\u0131<\/strong><\/div><\/td> <td > <div >Daha esnek ve ayr\u0131nt\u0131l\u0131 kontrol sa\u011flar<\/div><\/td> <td > <div >Daha basit, ancak daha az \u00f6zelle\u015ftirilebilir<\/div><\/td> <\/tr> <tr > <td > <div ><strong>Uyum S\u00fcreci<\/strong><\/div><\/td> <td > <div >Geleneksel ve yayg\u0131n kullan\u0131lan y\u00f6ntemdir<\/div><\/td> <td > <div >Yeni ve geli\u015fmekte olan bir y\u00f6ntemdir<\/div><\/td> <\/tr> <\/tbody> <\/table> <ul> <li><strong>Eri\u015fim Politikalar\u0131: <\/strong>Hassas ve ayr\u0131nt\u0131l\u0131 eri\u015fim denetimi gerekti\u011finde tercih edilir.<\/li> <li data-spm-anchor-><strong>Azure RBAC: <\/strong>Genel eri\u015fim rolleri tan\u0131mlanmas\u0131 gerekti\u011finde veya \u00e7ok say\u0131da Key Vault y\u00f6netilmesi gerekti\u011finde tercih edilir.<\/li> <\/ul> <h3><strong data-spm-anchor->Eri\u015fim Politikalar\u0131 Olu\u015fturma ve Y\u00f6netme<\/strong><\/h3> <p data-spm-anchor->Azure portal, PowerShell veya Azure CLI kullanarak eri\u015fim politikalar\u0131 olu\u015fturabilir ve y\u00f6netebilirsiniz.<\/p> <h4><strong>Azure Portal \u00dczerinden Eri\u015fim Politikas\u0131 Olu\u015fturma<\/strong><\/h4> <ol start=\"1\"> <li>Azure portal\u0131nda ilgili Key Vault\u2019a gidin.<\/li> <li>Sol men\u00fcden <strong>Eri\u015fim \u0130lkeleri (Access Policies) <\/strong>se\u00e7ene\u011fini se\u00e7in.<\/li> <li><strong>Eri\u015fim \u0130lkesi Ekle (Add Access Policy) <\/strong>butonuna t\u0131klay\u0131n.<\/li> <li><strong>Anahtar, S\u0131r veya Sertifika \u0130zinleri (Key, Secret or Certificate Permissions) <\/strong>b\u00f6l\u00fcm\u00fcnden uygun izinleri se\u00e7in.<\/li> <li><strong>Se\u00e7ili As\u0131l (Selected Principal) <\/strong>alan\u0131nda eri\u015fim izni verilecek kullan\u0131c\u0131, uygulama veya grubu se\u00e7in.<\/li> <li><strong>Ekle (Add) <\/strong>butonuna t\u0131klayarak politikay\u0131 kaydedin.<\/li> <\/ol> <h4><strong data-spm-anchor-> PowerShell ile Eri\u015fim Politikas\u0131 Y\u00f6netimi<\/strong><\/h4> <pre  data-enlighter-language=\"powershell\"># Eri\u015fim politikas\u0131 olu\u015fturma Set-AzKeyVaultAccessPolicy -VaultName \"MyKeyVault\" ` -UserPrincipalName \"user@example.com\" ` -PermissionsToSecrets Get, List, Set ` -PermissionsToKeys Get, List, Create<\/pre> <h4><strong data-spm-anchor->Azure CLI ile Eri\u015fim Politikas\u0131 Y\u00f6netimi<\/strong><\/h4> <pre  data-enlighter-language=\"powershell\"># Eri\u015fim politikas\u0131 olu\u015fturma az keyvault set-policy --name \"MyKeyVault\" \\ --upn \"user@example.com\" \\ --secret-permissions get list set \\ --key-permissions get list create<\/pre> <h3><strong data-spm-anchor-> Tavsiyeler;<\/strong><\/h3> <ul> <li data-spm-anchor-><strong>En Az Ayr\u0131cal\u0131k \u0130lkesi (Principle of Least Privilege): <\/strong>Kullan\u0131c\u0131lara veya uygulamalara sadece ihtiya\u00e7 duyduklar\u0131 izinleri verin.<\/li> <li><strong>D\u00fczenli \u0130nceleme: <\/strong>Eri\u015fim politikalar\u0131n\u0131 d\u00fczenli olarak g\u00f6zden ge\u00e7irin ve art\u0131k gerekli olmayan izinleri kald\u0131r\u0131n.<\/li> <li><strong>\u0130\u015flev Ay\u0131r\u0131m\u0131 (Separation of Duties): <\/strong>Kritik i\u015flemler i\u00e7in farkl\u0131 roller tan\u0131mlay\u0131n (\u00f6rne\u011fin, biri sadece okuma, di\u011feri yazma iznine sahip olabilir).<\/li> <li><strong>Denetim ve \u0130zleme: <\/strong>Azure Monitor ve Azure Security Center ile eri\u015fim aktivitelerini izleyin.<\/li> <li><strong>Yedekleme ve Kurtarma: <\/strong>Eri\u015fim politikalar\u0131n\u0131 d\u00fczenli olarak yedekleyin ve ola\u011fan\u00fcst\u00fc durumlar i\u00e7in kurtarma plan\u0131 haz\u0131rlay\u0131n.<\/li> <\/ul> Azure Key Vault\u2019ta <strong>Eri\u015fim Politikalar\u0131 <\/strong>, secret , keys ve sertifikalara eri\u015fimi g\u00fcvenli ve kontroll\u00fc bir \u015fekilde y\u00f6netmenin en etkili y\u00f6ntemlerinden biridir. \u00d6zellikle hassas verilere ayr\u0131nt\u0131l\u0131 eri\u015fim denetimi gerekti\u011finde bu yakla\u015f\u0131m, hem esnek hem de g\u00fcvenli bir yap\u0131 sunar. Ancak, Azure RBAC gibi yeni y\u00f6ntemler de geli\u015fmekte ve baz\u0131 senaryolarda daha pratik \u00e7\u00f6z\u00fcmler sunmaktad\u0131r. Hangi y\u00f6ntemi se\u00e7erseniz se\u00e7in, izin y\u00f6netiminde <strong>g\u00fcvenlik <\/strong>, <strong>esneklik <\/strong>ve <strong>kullan\u0131labilirlik <\/strong>dengesini korumak hayati \u00f6neme sahiptir. Eri\u015fim politikalar\u0131n\u0131 olu\u015ftururken, her zaman test ortam\u0131nda \u00f6nceden sim\u00fclasyon yap\u0131n. Ger\u00e7ek ortamlarda de\u011fi\u015fiklikler \u00f6ncesi t\u00fcm izinleri dikkatle g\u00f6zden ge\u00e7irin. <\/div> <\/div>","excerpt":"Bulut bili\u015fimde hassas verilerin g\u00fcvenli bir \u015fekilde saklanmas\u0131 ve y\u00f6netilmesi, modern uygulama geli\u015ftirme ve sistem y\u00f6netimi i\u00e7in hayati...","created_at":"2025-05-01 12:06:32","updated_at":"2026-09-06 16:51:29","category_id":8,"view_count":660,"reading_time":6,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-05-01 12:06:32","featured_image":"resimyok.jpg","slug":"azure-key-vault-nedir","category_name":"Active Directory \/Azure","category_slug":"active-directory-azure","category_color":"#f59e0b"},{"id":125,"title":"Active Directory Senkronizasyonunu Devre D\u0131\u015f\u0131 B\u0131rakma","content":"\u015eirketler Microsoft 365 ve Azure bulut hizmetlerine ge\u00e7i\u015f yaparken, \u015firket i\u00e7i Active Directory ile bulut hizmetleri aras\u0131nda kimlik senkronizasyonunu sa\u011flamak i\u00e7in genellikle Azure AD Connect (eski ad\u0131yla DirSync veya Azure AD Sync) kullan\u0131rlar. Ancak belirli durumlarda, bu senkronizasyonu devre d\u0131\u015f\u0131 b\u0131rakman\u0131z veya tamamen kald\u0131rman\u0131z gerekebilir. Bu rehberde, Active Directory senkronizasyonunun ne oldu\u011funu, neden devre d\u0131\u015f\u0131 b\u0131rakmak isteyebilece\u011finizi ve bu i\u015flemi g\u00fcvenli bir \u015fekilde nas\u0131l ger\u00e7ekle\u015ftirebilece\u011finizi ele alaca\u011f\u0131z. <h2>\u0130\u00e7indekiler<\/h2> <ol> <li>Active Directory Senkronizasyonu Nedir?<\/li> <li>Senkronizasyonu Neden Devre D\u0131\u015f\u0131 B\u0131rakmal\u0131s\u0131n\u0131z?<\/li> <li>Devre D\u0131\u015f\u0131 B\u0131rakmadan \u00d6nce Dikkat Edilmesi Gerekenler<\/li> <li>Active Directory Senkronizasyonunu Devre D\u0131\u015f\u0131 B\u0131rakma Y\u00f6ntemleri <ul> <li>Y\u00f6ntem 1: Microsoft 365 Y\u00f6netici Merkezini Kullanma<\/li> <li>Y\u00f6ntem 2: PowerShell ile Devre D\u0131\u015f\u0131 B\u0131rakma<\/li> <li>Y\u00f6ntem 3: Azure AD Connect Sunucusundan Kald\u0131rma<\/li> <\/ul> <\/li> <li>Senkronizasyon Durumunu Do\u011frulama<\/li> <li>Senkronizasyon Kald\u0131r\u0131ld\u0131ktan Sonra Yap\u0131lmas\u0131 Gerekenler<\/li> <li>S\u0131k Kar\u015f\u0131la\u015f\u0131lan Sorunlar ve \u00c7\u00f6z\u00fcmleri<\/li> <li>Senkronizasyonu Yeniden Etkinle\u015ftirme<\/li> <li>Sonu\u00e7<\/li> <\/ol> <h2>Active Directory Senkronizasyonu Nedir?<\/h2> Active Directory senkronizasyonu, \u015firket i\u00e7i Active Directory ortam\u0131n\u0131zdaki kullan\u0131c\u0131 hesaplar\u0131, gruplar ve di\u011fer nesneler ile Microsoft 365 ve Azure Active Directory aras\u0131nda kimlik bilgilerinin otomatik olarak e\u015fitlenmesini sa\u011flayan bir s\u00fcre\u00e7tir. Bu senkronizasyon, Azure AD Connect arac\u0131 taraf\u0131ndan y\u00f6netilir. Bu senkronizasyon sayesinde: <ul> <li>Kullan\u0131c\u0131lar tek bir kimlikle hem \u015firket i\u00e7i hem de bulut kaynaklar\u0131na eri\u015febilir<\/li> <li>Parolalar\u0131n tek noktadan y\u00f6netimi sa\u011flan\u0131r (Parola hash senkronizasyonu veya Pass-through Authentication kullan\u0131l\u0131yorsa)<\/li> <li>Kurulu\u015f gruplar\u0131 ve di\u011fer dizin nesneleri otomatik olarak bulut ortam\u0131na yans\u0131t\u0131l\u0131r<\/li> <li>Federasyon hizmetleri i\u00e7in gerekli temel yap\u0131 sa\u011flan\u0131r<\/li> <\/ul> <h2>Senkronizasyonu Neden Devre D\u0131\u015f\u0131 B\u0131rakmal\u0131s\u0131n\u0131z?<\/h2> Active Directory senkronizasyonunu devre d\u0131\u015f\u0131 b\u0131rakmak i\u00e7in \u00e7e\u015fitli nedenler olabilir: <ol> <li><strong>Tamamen Buluta Ge\u00e7i\u015f<\/strong>: T\u00fcm kimlik y\u00f6netimini bulut tabanl\u0131 yapmaya karar verdiyseniz ve art\u0131k \u015firket i\u00e7i Active Directory'ye ihtiyac\u0131n\u0131z yoksa<\/li> <li><strong>Senkronizasyon Mimarisini De\u011fi\u015ftirme<\/strong>: Azure AD Connect yap\u0131land\u0131rman\u0131z\u0131 \u00f6nemli \u00f6l\u00e7\u00fcde de\u011fi\u015ftirmeniz gerekiyorsa (\u00f6rne\u011fin, farkl\u0131 bir filtreleme yakla\u015f\u0131m\u0131 kullanmak i\u00e7in)<\/li> <li><strong>Senkronizasyon Sorunlar\u0131<\/strong>: Senkronizasyonda s\u00fcrekli hatalar al\u0131yorsan\u0131z ve yeniden yap\u0131land\u0131rma yapmak istiyorsan\u0131z<\/li> <li><strong>\u015eirket Birle\u015fmeleri\/Sat\u0131n Almalar\u0131<\/strong>: \u0130ki farkl\u0131 Active Directory orman\u0131n\u0131 birle\u015ftiriyorsan\u0131z veya yeni bir kimlik yap\u0131s\u0131na ge\u00e7iyorsan\u0131z<\/li> <li><strong>Test Ortam\u0131ndan \u00dcretime Ge\u00e7i\u015f<\/strong>: Test ama\u00e7l\u0131 bir senkronizasyon kurulumundan \u00fcretim ortam\u0131na ge\u00e7iyorsan\u0131z<\/li> <li><strong>Tekille\u015ftirme Sorunlar\u0131<\/strong>: Tekrar eden veya \u00e7ak\u0131\u015fan nesnelerle ilgili kal\u0131c\u0131 sorunlar ya\u015f\u0131yorsan\u0131z<\/li> <\/ol> <h2>Devre D\u0131\u015f\u0131 B\u0131rakmadan \u00d6nce Dikkat Edilmesi Gerekenler<\/h2> Active Directory senkronizasyonunu devre d\u0131\u015f\u0131 b\u0131rakmadan \u00f6nce a\u015fa\u011f\u0131daki \u00f6nemli noktalar\u0131 g\u00f6z \u00f6n\u00fcnde bulundurmal\u0131s\u0131n\u0131z: <h3>1. Veri ve Eri\u015fim De\u011ferlendirmesi<\/h3> <ul> <li><strong>Kullan\u0131c\u0131 Eri\u015fimi<\/strong>: Senkronizasyon devre d\u0131\u015f\u0131 b\u0131rak\u0131ld\u0131ktan sonra, senkronize edilmi\u015f kullan\u0131c\u0131lar Microsoft 365 hizmetlerine eri\u015femeyecektir (yeni kimlik bilgileri olu\u015fturulana kadar)<\/li> <li><strong>Lisans Durumu<\/strong>: Senkronize kullan\u0131c\u0131lara atanan lisanslar\u0131n durumunu kontrol edin<\/li> <li><strong>Hybrid Yap\u0131land\u0131rmalar<\/strong>: Exchange Hybrid, SharePoint Hybrid gibi yap\u0131land\u0131rmalar\u0131n\u0131z etkilenecektir<\/li> <\/ul> <h3>2. Yedekleme ve Dok\u00fcmantasyon<\/h3> <ul> <li>Mevcut Azure AD Connect yap\u0131land\u0131rman\u0131z\u0131 belgelendirin<\/li> <li>Azure AD'deki kullan\u0131c\u0131lar\u0131 ve gruplar\u0131 yedekleyin veya d\u0131\u015fa aktar\u0131n<\/li> <li>UPN (User Principal Name) de\u011ferlerini ve di\u011fer kritik kullan\u0131c\u0131 \u00f6zelliklerini kaydedin<\/li> <\/ul> <h3>3. \u0130leti\u015fim Plan\u0131<\/h3> <ul> <li>Kullan\u0131c\u0131lar\u0131 olas\u0131 kesintiler hakk\u0131nda bilgilendirin<\/li> <li>Y\u00f6netici ekibine yap\u0131lacak de\u011fi\u015fiklikleri detayl\u0131 bir \u015fekilde a\u00e7\u0131klay\u0131n<\/li> <li>Acil durum plan\u0131 ve geri d\u00f6n\u00fc\u015f stratejisi olu\u015fturun<\/li> <\/ul> <h3>4. Zamanlama<\/h3> <ul> <li>D\u00fc\u015f\u00fck kullan\u0131m saatlerinde i\u015flemi ger\u00e7ekle\u015ftirin<\/li> <li>Yeterli test s\u00fcresi ve kesinti penceresi planlay\u0131n<\/li> <li>Hafta sonu veya i\u015f saatleri d\u0131\u015f\u0131nda bu i\u015flemi yapmay\u0131 d\u00fc\u015f\u00fcn\u00fcn<\/li> <\/ul> <h2>Active Directory Senkronizasyonunu Devre D\u0131\u015f\u0131 B\u0131rakma Y\u00f6ntemleri<\/h2> <h3>Y\u00f6ntem 1: Microsoft 365 Y\u00f6netici Merkezini Kullanma<\/h3> Bu y\u00f6ntem, Microsoft 365 admin portal \u00fczerinden senkronizasyonu devre d\u0131\u015f\u0131 b\u0131rakmak i\u00e7in kullan\u0131l\u0131r: <ol> <li><a href=\"https:\/\/admin.microsoft.com\/\">Microsoft 365 Y\u00f6netici Merkezi<\/a>'ne Global Y\u00f6netici kimlik bilgileriyle giri\u015f yap\u0131n<\/li> <li>Sol men\u00fcden <strong>Ayarlar<\/strong> &gt; <strong>Org ayarlar\u0131<\/strong>'na t\u0131klay\u0131n<\/li> <li><strong>Profil<\/strong> sekmesini se\u00e7in<\/li> <li><strong>Dizin senkronizasyonu<\/strong> b\u00f6l\u00fcm\u00fcn\u00fc bulun<\/li> <li>\"Dizin senkronizasyonu etkin\" se\u00e7ene\u011fini kapat\u0131n<\/li> <li>A\u00e7\u0131lan pencerede s\u00fcreci anlad\u0131\u011f\u0131n\u0131z\u0131 do\u011frulay\u0131n ve <strong>Devre d\u0131\u015f\u0131 b\u0131rak<\/strong>'a t\u0131klay\u0131n<\/li> <\/ol> Bu i\u015flem tamamland\u0131\u011f\u0131nda, Microsoft 365 art\u0131k \u015firket i\u00e7i Active Directory'den g\u00fcncellemeleri kabul etmeyecektir. <h3>Y\u00f6ntem 2: PowerShell ile Devre D\u0131\u015f\u0131 B\u0131rakma<\/h3> PowerShell kullanarak senkronizasyonu devre d\u0131\u015f\u0131 b\u0131rakmak daha fazla kontrol sa\u011flar ve daha b\u00fcy\u00fck ortamlar i\u00e7in tercih edilir: <ol> <li>Windows PowerShell'i y\u00f6netici olarak ba\u015flat\u0131n<\/li> <li>MSOnline PowerShell mod\u00fcl\u00fcn\u00fc y\u00fckleyin (y\u00fckl\u00fc de\u011filse):<\/li> <\/ol> <pre><code >Install-Module -Name MSOnline <\/code><\/pre> <ol start=\"3\"> <li>Microsoft 365'e Global Y\u00f6netici kimlik bilgileriyle ba\u011flan\u0131n:<\/li> <\/ol> <pre><code >Connect-MsolService <\/code><\/pre> <ol start=\"4\"> <li>Mevcut dizin senkronizasyonu durumunu kontrol edin:<\/li> <\/ol> <pre><code >(Get-MsolCompanyInformation).DirectorySynchronizationEnabled <\/code><\/pre> <ol start=\"5\"> <li>Senkronizasyonu devre d\u0131\u015f\u0131 b\u0131rakmak i\u00e7in:<\/li> <\/ol> <pre><code >Set-MsolDirSyncEnabled -EnableDirSync $false <\/code><\/pre> <ol start=\"6\"> <li>Onay istendi\u011finde \"Y\" yaz\u0131p Enter tu\u015funa bas\u0131n<\/li> <li>Senkronizasyon durumunu kontrol edin (False olarak g\u00f6r\u00fcnmelidir):<\/li> <\/ol> <pre><code >(Get-MsolCompanyInformation).DirectorySynchronizationEnabled <\/code><\/pre> <h3>Y\u00f6ntem 3: Azure AD Connect Sunucusundan Kald\u0131rma<\/h3> Senkronizasyonu tamamen kald\u0131rmak ve Azure AD Connect'i sunucudan silmek i\u00e7in: <ol> <li>Azure AD Connect kurulu sunucuya yerel y\u00f6netici olarak giri\u015f yap\u0131n<\/li> <li><strong>Kontrol Paneli<\/strong> &gt; <strong>Programlar ve \u00d6zellikler<\/strong>'e gidin<\/li> <li>Listeden <strong>Microsoft Azure AD Connect<\/strong>'i bulun ve <strong>Kald\u0131r<\/strong>'a t\u0131klay\u0131n<\/li> <li>Azure AD Connect kald\u0131rma sihirbaz\u0131n\u0131 takip edin<\/li> <li>\u0130\u015flem tamamland\u0131ktan sonra sunucuyu yeniden ba\u015flat\u0131n<\/li> <\/ol> <h2>Senkronizasyon Durumunu Do\u011frulama<\/h2> Senkronizasyonun ba\u015far\u0131yla devre d\u0131\u015f\u0131 b\u0131rak\u0131ld\u0131\u011f\u0131n\u0131 do\u011frulamak i\u00e7in: <h3>Microsoft 365 Y\u00f6netici Merkezi \u00dczerinden Do\u011frulama<\/h3> <ol> <li><a href=\"https:\/\/admin.microsoft.com\/\">Microsoft 365 Y\u00f6netici Merkezi<\/a>'ne giri\u015f yap\u0131n<\/li> <li><strong>Kullan\u0131c\u0131lar<\/strong> &gt; <strong>Aktif Kullan\u0131c\u0131lar<\/strong>'a gidin<\/li> <li>Herhangi bir kullan\u0131c\u0131 i\u00e7in listede \"\u015eirket i\u00e7i E\u015fitleme\" s\u00fctununu kontrol edin - art\u0131k kullan\u0131c\u0131larda \"Senkronize\" etiketi olmamal\u0131d\u0131r<\/li> <\/ol> <h3>PowerShell ile Do\u011frulama<\/h3> <ol> <li>MSOnline PowerShell mod\u00fcl\u00fcn\u00fc kullanarak ba\u011flan\u0131n:<\/li> <\/ol> <pre><code >Connect-MsolService <\/code><\/pre> <ol start=\"2\"> <li>Senkronizasyon durumunu kontrol edin:<\/li> <\/ol> <pre><code >(Get-MsolCompanyInformation).DirectorySynchronizationEnabled \u00c7\u0131kt\u0131 a\u015fa\u011f\u0131daki gibi olmal\u0131 DisplayName OnPremisesSyncEnabled ----------- --------------------- domain <img  src=\"https:\/\/ondernet.net\/wp-content\/uploads\/2025\/04\/Screenshot_4.jpg\" alt=\"\" width=\"1025\" height=\"651\" \/> 3 numaran\u0131n art\u0131k blulut \u015fekline d\u00f6nmesi gerekiyor<\/code><\/pre> <ol start=\"3\"> <li>Kullan\u0131c\u0131lar\u0131n senkronizasyon durumunu kontrol edin:<\/li> <\/ol> <pre><code >Get-MsolUser | Where-Object {$_.ImmutableId -ne $null} | Select-Object UserPrincipalName, ImmutableId <\/code><\/pre> Senkronizasyon ba\u015far\u0131yla devre d\u0131\u015f\u0131 b\u0131rak\u0131ld\u0131ysa, yeni olu\u015fturulan kullan\u0131c\u0131lar\u0131n ImmutableId de\u011feri bo\u015f olacakt\u0131r. <h2>Senkronizasyon Kald\u0131r\u0131ld\u0131ktan Sonra Yap\u0131lmas\u0131 Gerekenler<\/h2> Senkronizasyon devre d\u0131\u015f\u0131 b\u0131rak\u0131ld\u0131ktan sonra, ortam\u0131n\u0131z\u0131 yeni duruma g\u00f6re ayarlaman\u0131z gerekir: <h3>1. Kullan\u0131c\u0131 Hesaplar\u0131n\u0131 D\u00f6n\u00fc\u015ft\u00fcrme<\/h3> Senkronize edilmi\u015f kullan\u0131c\u0131lar otomatik olarak bulut kullan\u0131c\u0131lar\u0131na d\u00f6n\u00fc\u015ft\u00fcr\u00fclmez. Kullan\u0131c\u0131lar\u0131n eri\u015fimi i\u00e7in: <ul> <li>Her kullan\u0131c\u0131 i\u00e7in yeni bulut parolalar\u0131 olu\u015fturun<\/li> <li><a href=\"https:\/\/learn.microsoft.com\/en-us\/powershell\/module\/msonline\/convert-msoldirsyncenable\">Convert-MsolDirSyncEnabled PowerShell komutu<\/a> kullanarak toplu d\u00f6n\u00fc\u015ft\u00fcrme yap\u0131n<\/li> <li>Gerekirse kullan\u0131c\u0131 \u00f6zniteliklerini man\u00fcel olarak g\u00fcncelleyin<\/li> <\/ul> <h3>2. Gruplar\u0131 Yeniden Olu\u015fturma<\/h3> <ul> <li>\u00d6nemli da\u011f\u0131t\u0131m gruplar\u0131 ve g\u00fcvenlik gruplar\u0131 i\u00e7in bulut s\u00fcr\u00fcmlerini olu\u015fturun<\/li> <li>Grup \u00fcyeliklerini yeniden yap\u0131land\u0131r\u0131n<\/li> <\/ul> <h3>3. Uygulama Yap\u0131land\u0131rmalar\u0131n\u0131 G\u00fcncelleme<\/h3> <ul> <li>SSO (Tek Oturum A\u00e7ma) ba\u011f\u0131ml\u0131l\u0131klar\u0131n\u0131 kontrol edin<\/li> <li>Uygulama izinlerini ve atamalar\u0131n\u0131 g\u00f6zden ge\u00e7irin<\/li> <li>Gerekirse ko\u015fullu eri\u015fim politikalar\u0131n\u0131 g\u00fcncelleyin<\/li> <\/ul> <h3>4. Lisans Y\u00f6netimi<\/h3> <ul> <li>Lisanslar\u0131n do\u011fru kullan\u0131c\u0131lara atand\u0131\u011f\u0131n\u0131 do\u011frulay\u0131n<\/li> <li>Grup tabanl\u0131 lisanslamalar\u0131 g\u00f6zden ge\u00e7irin<\/li> <\/ul> <h2>S\u0131k Kar\u015f\u0131la\u015f\u0131lan Sorunlar ve \u00c7\u00f6z\u00fcmleri<\/h2> <h3>Sorun 1: Senkronizasyon Devre D\u0131\u015f\u0131 B\u0131rak\u0131lam\u0131yor<\/h3> <strong>Belirtiler<\/strong>: Set-MsolDirSyncEnabled komutu \u00e7al\u0131\u015fm\u0131yor veya portal \u00fczerinden devre d\u0131\u015f\u0131 b\u0131rakma i\u015flemi tamamlanm\u0131yor. <strong>\u00c7\u00f6z\u00fcm<\/strong>: <ol> <li>Global Y\u00f6netici yetkinizin oldu\u011fundan emin olun<\/li> <li>Son senkronizasyonun tamamlanmas\u0131n\u0131 bekleyin<\/li> <li>Microsoft destek ile ileti\u015fime ge\u00e7in<\/li> <\/ol> <h3>Sorun 2: Kullan\u0131c\u0131lar Eri\u015fim Kaybediyor<\/h3> <strong>Belirtiler<\/strong>: Senkronizasyon kald\u0131r\u0131ld\u0131ktan sonra kullan\u0131c\u0131lar Microsoft 365 hizmetlerine eri\u015femiyor. <strong>\u00c7\u00f6z\u00fcm<\/strong>: <ol> <li>Kullan\u0131c\u0131 hesaplar\u0131n\u0131 bulut hesaplar\u0131na d\u00f6n\u00fc\u015ft\u00fcr\u00fcn<\/li> <li>Kullan\u0131c\u0131lara yeni parolalar atay\u0131n<\/li> <li>Lisanslar\u0131n do\u011fru atand\u0131\u011f\u0131ndan emin olun<\/li> <\/ol> <h3>Sorun 3: \"E\u015fitleme \u0130\u015flemi Devam Ediyor\" Hatas\u0131<\/h3> <strong>Belirtiler<\/strong>: Senkronizasyonu devre d\u0131\u015f\u0131 b\u0131rakmaya \u00e7al\u0131\u015f\u0131rken \"Dizin e\u015fitleme i\u015flemi devam ediyor\" hatas\u0131 al\u0131n\u0131yor. <strong>\u00c7\u00f6z\u00fcm<\/strong>: <ol> <li>72 saat bekleyin (bazen sistemin senkronizasyon durumunu g\u00fcncellemesi zaman alabilir)<\/li> <li>AAD Connect Health durumunu kontrol edin<\/li> <li><a href=\"https:\/\/support.microsoft.com\/\">Microsoft Destek<\/a> ile ileti\u015fime ge\u00e7in<\/li> <\/ol> <h2>Senkronizasyonu Yeniden Etkinle\u015ftirme<\/h2> Gelecekte senkronizasyonu yeniden etkinle\u015ftirmeniz gerekirse: <h3>Azure AD Connect'i Yeniden Y\u00fckleme<\/h3> <ol> <li><a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=47594\">En son Azure AD Connect s\u00fcr\u00fcm\u00fcn\u00fc indirin<\/a><\/li> <li>Kurulum sihirbaz\u0131n\u0131 \u00e7al\u0131\u015ft\u0131r\u0131n<\/li> <li>\"Express settings\" veya \"Customize\" se\u00e7ene\u011fini tercih edin<\/li> <li>Global Y\u00f6netici kimlik bilgilerinizi girin ve kurulumu tamamlay\u0131n<\/li> <\/ol> <h3>PowerShell ile Etkinle\u015ftirme<\/h3> Senkronizasyonu PowerShell ile etkinle\u015ftirmek m\u00fcmk\u00fcn de\u011fildir. Azure AD Connect'in y\u00fcklenmesi gerekir. Active Directory senkronizasyonunu devre d\u0131\u015f\u0131 b\u0131rakmak, Microsoft 365 ve Azure AD ortam\u0131n\u0131z\u0131 \u00f6nemli \u00f6l\u00e7\u00fcde etkileyen bir karard\u0131r. Bu i\u015flem, kullan\u0131c\u0131lar\u0131n kimlik do\u011frulamas\u0131n\u0131, eri\u015fim haklar\u0131n\u0131 ve genel kullan\u0131c\u0131 deneyimini de\u011fi\u015ftirir. Bu rehberde a\u00e7\u0131klanan ad\u0131mlar\u0131 dikkatle uygulad\u0131\u011f\u0131n\u0131zda, senkronizasyonu g\u00fcvenli bir \u015fekilde devre d\u0131\u015f\u0131 b\u0131rakabilir ve bulut kimlik y\u00f6netimine ge\u00e7i\u015finizi sorunsuz bir \u015fekilde tamamlayabilirsiniz. \u00c7ok b\u00fcy\u00fck veya karma\u015f\u0131k ortamlarda, bu i\u015flemi ger\u00e7ekle\u015ftirmeden \u00f6nce Microsoft Premier Support veya bir dan\u0131\u015fmanl\u0131k hizmeti ile ileti\u015fime ge\u00e7meniz \u00f6nerilir. <hr \/> <strong>Not<\/strong>: Microsoft'un hizmetleri ve \u00f6zellikleri zaman i\u00e7inde de\u011fi\u015febilir. Bu rehberi takip ederken, Microsoft'un resmi belgelerini de kontrol etmeniz \u00f6nerilir.","excerpt":"\u015eirketler Microsoft 365 ve Azure bulut hizmetlerine ge\u00e7i\u015f yaparken, \u015firket i\u00e7i Active Directory ile bulut hizmetleri aras\u0131nda kimlik...","created_at":"2025-04-05 16:01:27","updated_at":"2026-09-07 14:34:20","category_id":6,"view_count":731,"reading_time":8,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-04-05 16:01:27","featured_image":"resimyok.jpg","slug":"active-directory-senkronizasyonunu-devre-disi-birakma","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"},{"id":130,"title":"Azure Portal'da Uygulama Kayd\u0131 Olu\u015fturma","content":"Azure platformunda uygulamalar\u0131n\u0131z\u0131n Azure Active Directory (Azure AD) kirac\u0131n\u0131zdaki kaynaklara g\u00fcvenli bir \u015fekilde eri\u015febilmesi i\u00e7in uygulama kayd\u0131 (App Registration) olu\u015fturman\u0131z gerekir. Bu i\u015flem, uygulaman\u0131za bir kimlik kazand\u0131rarak OAuth 2.0\/OpenID Connect protokolleri \u00fczerinden kimlik do\u011frulama ve yetkilendirme yapman\u0131z\u0131 sa\u011flar. Bu rehberde, Azure Portal \u00fczerinden uygulama kayd\u0131 olu\u015fturma s\u00fcrecini detayl\u0131 olarak ele alaca\u011f\u0131z. <h2>Neden Uygulama Kayd\u0131 Olu\u015fturmal\u0131y\u0131z?<\/h2> Uygulama kayd\u0131 olu\u015fturmak: <ul> <li>Uygulaman\u0131za Azure AD taraf\u0131ndan y\u00f6netilen bir kimlik kazand\u0131r\u0131r<\/li> <li>Microsoft Graph API, Azure REST API veya kendi API'lerinize g\u00fcvenli eri\u015fim sa\u011flar<\/li> <li>Single Sign-On (SSO) \u00f6zelli\u011fini uygulaman\u0131za entegre etmenizi sa\u011flar<\/li> <li>Kullan\u0131c\u0131 ad\u0131\/parola bilgilerini uygulaman\u0131zda saklamadan g\u00fcvenli kimlik do\u011frulama yapman\u0131z\u0131 sa\u011flar<\/li> <\/ul> <h2>\u00d6n Gereksinimler<\/h2> <ul> <li>Aktif bir Azure hesab\u0131<\/li> <li>Azure Active Directory \u00fczerinde uygulama kaydetme yetkisi (genellikle Global Administrator, Cloud Application Administrator veya Application Administrator rollerine sahip kullan\u0131c\u0131lar)<\/li> <\/ul> <h2>Ad\u0131m 1: Azure Portal'a Giri\u015f<\/h2> <ol> <li><a href=\"https:\/\/portal.azure.com\/\">Azure Portal<\/a>'a gidin ve hesab\u0131n\u0131zla oturum a\u00e7\u0131n.<\/li> <li>\u00dcst arama \u00e7ubu\u011funda \"Azure Active Directory\" yaz\u0131p se\u00e7in.<\/li> <li>Sol men\u00fcden \"App registrations\" (Uygulama kay\u0131tlar\u0131) se\u00e7ene\u011fine t\u0131klay\u0131n.<\/li> <\/ol> <h2>Ad\u0131m 2: Yeni Uygulama Kayd\u0131 Olu\u015fturma<\/h2> <ol> <li>\"New registration\" (Yeni kay\u0131t) d\u00fc\u011fmesine t\u0131klay\u0131n.<\/li> <li>A\u015fa\u011f\u0131daki bilgileri doldurun: <ul> <li><strong>Name<\/strong> (Ad): Uygulaman\u0131z\u0131n ad\u0131n\u0131 girin (\u00f6rne\u011fin, \"MyCompanyApp\")<\/li> <li><strong>Supported account types<\/strong> (Desteklenen hesap t\u00fcrleri): Uygulaman\u0131z\u0131n eri\u015fmesini istedi\u011finiz hesap t\u00fcrlerini se\u00e7in: <ul> <li><strong>Accounts in this organizational directory only<\/strong> (Yaln\u0131zca bu organizasyon dizinindeki hesaplar) - Sadece kendi kirac\u0131n\u0131zdaki kullan\u0131c\u0131lar<\/li> <li><strong>Accounts in any organizational directory<\/strong> (Herhangi bir organizasyon dizinindeki hesaplar) - T\u00fcm Azure AD kirac\u0131lar\u0131ndaki kullan\u0131c\u0131lar<\/li> <li><strong>Accounts in any organizational directory and personal Microsoft accounts<\/strong> (Herhangi bir organizasyon dizinindeki hesaplar ve ki\u015fisel Microsoft hesaplar\u0131) - Azure AD kullan\u0131c\u0131lar\u0131 ve ki\u015fisel Microsoft hesaplar\u0131<\/li> <\/ul> <\/li> <li><strong>Redirect URI<\/strong> (Y\u00f6nlendirme URI'si): Kullan\u0131c\u0131lar kimlik do\u011frulamay\u0131 tamamlad\u0131ktan sonra y\u00f6nlendirilecekleri URI'yi belirtin: <ul> <li>Platform se\u00e7in (Web, SPA, iOS\/macOS, Android veya Mobile and desktop applications)<\/li> <li>URI'yi girin (\u00f6rne\u011fin, <code>https:\/\/myapp.example.com\/auth-callback<\/code>)<\/li> <\/ul> <\/li> <\/ul> <\/li> <li>\"Register\" (Kaydet) d\u00fc\u011fmesine t\u0131klay\u0131n.<\/li> <\/ol> <h2>Ad\u0131m 3: Kimlik Bilgilerini Alma<\/h2> Uygulama kayd\u0131 olu\u015fturuldu\u011funda, a\u015fa\u011f\u0131daki \u00f6nemli kimlik bilgilerini alacaks\u0131n\u0131z: <ol> <li><strong>Application (client) ID<\/strong> (Uygulama (istemci) Kimli\u011fi): Uygulaman\u0131z\u0131 benzersiz \u015fekilde tan\u0131mlayan GUID.<\/li> <li><strong>Directory (tenant) ID<\/strong> (Dizin (kirac\u0131) Kimli\u011fi): Azure AD kirac\u0131n\u0131z\u0131 tan\u0131mlayan GUID.<\/li> <\/ol> Bu de\u011ferler, uygulama kodunuzda Azure AD'ye kar\u015f\u0131 kimlik do\u011frulama yaparken kullan\u0131lacakt\u0131r. <h2>Ad\u0131m 4: \u0130stemci Gizli Anahtar\u0131 (Client Secret) Olu\u015fturma<\/h2> Web uygulamalar\u0131 veya API'ler i\u00e7in genellikle bir istemci gizli anahtar\u0131 olu\u015fturman\u0131z gerekir: <ol> <li>Sol men\u00fcden \"Certificates &amp; secrets\" (Sertifikalar ve gizli anahtarlar) se\u00e7ene\u011fine t\u0131klay\u0131n.<\/li> <li>\"Client secrets\" (\u0130stemci gizli anahtarlar\u0131) sekmesinde \"New client secret\" (Yeni istemci gizli anahtar\u0131) d\u00fc\u011fmesine t\u0131klay\u0131n.<\/li> <li>Bir a\u00e7\u0131klama girin ve s\u00fcresini se\u00e7in (6 ay, 12 ay veya 24 ay).<\/li> <li>\"Add\" (Ekle) d\u00fc\u011fmesine t\u0131klay\u0131n.<\/li> <li>Olu\u015fturulan gizli anahtar\u0131n de\u011ferini hemen kopyalay\u0131n ve g\u00fcvenli bir yerde saklay\u0131n. Bu de\u011fer, bir daha g\u00f6r\u00fcnt\u00fclenmeyecektir!<\/li> <\/ol> <h2>Ad\u0131m 5: API \u0130zinlerini Yap\u0131land\u0131rma<\/h2> Uygulaman\u0131z\u0131n API'lere eri\u015febilmesi i\u00e7in gerekli izinleri yap\u0131land\u0131r\u0131n: <ol> <li>Sol men\u00fcden \"API permissions\" (API izinleri) se\u00e7ene\u011fine t\u0131klay\u0131n.<\/li> <li>\"Add a permission\" (\u0130zin ekle) d\u00fc\u011fmesine t\u0131klay\u0131n.<\/li> <li>\u0130zin vermek istedi\u011finiz API'yi se\u00e7in (\u00f6rne\u011fin, Microsoft Graph).<\/li> <li>\u0130zin t\u00fcr\u00fcn\u00fc se\u00e7in: <ul> <li><strong>Delegated permissions<\/strong> (Yetkilendirilmi\u015f izinler): Kullan\u0131c\u0131 ad\u0131na eri\u015fim<\/li> <li><strong>Application permissions<\/strong> (Uygulama izinleri): Kullan\u0131c\u0131 olmadan arka planda eri\u015fim<\/li> <\/ul> <\/li> <li>Gerekli izinleri se\u00e7in ve \"Add permissions\" (\u0130zinleri ekle) d\u00fc\u011fmesine t\u0131klay\u0131n.<\/li> <li>Uygulama izinleri i\u00e7in, \"Grant admin consent for \" (Y\u00f6netici onay\u0131 ver) d\u00fc\u011fmesine t\u0131klayarak kirac\u0131 genelinde onay verin.<\/li> <\/ol> <h2>Ad\u0131m 6: Kimlik Do\u011frulama Ayarlar\u0131n\u0131 Yap\u0131land\u0131rma<\/h2> <ol> <li>Sol men\u00fcden \"Authentication\" (Kimlik Do\u011frulama) se\u00e7ene\u011fine t\u0131klay\u0131n.<\/li> <li>\u0130htiyac\u0131n\u0131za g\u00f6re ek y\u00f6nlendirme URI'leri ekleyin.<\/li> <li>\"Implicit grant and hybrid flows\" (\u00d6rt\u00fck hibe ve hibrit ak\u0131\u015flar) b\u00f6l\u00fcm\u00fcnde, uygulaman\u0131za uygun ak\u0131\u015f t\u00fcrlerini etkinle\u015ftirin: <ul> <li>ID tokens (Kimlik belirte\u00e7leri)<\/li> <li>Access tokens (Eri\u015fim belirte\u00e7leri)<\/li> <\/ul> <\/li> <li>\"Advanced settings\" (Geli\u015fmi\u015f ayarlar) b\u00f6l\u00fcm\u00fcnde: <ul> <li>\"Allow public client flows\" (Genel istemci ak\u0131\u015flar\u0131na izin ver): Mobil ve masa\u00fcst\u00fc uygulamalar i\u00e7in etkinle\u015ftirin.<\/li> <\/ul> <\/li> <li>\"Save\" (Kaydet) d\u00fc\u011fmesine t\u0131klay\u0131n.<\/li> <\/ol> <h2>Ad\u0131m 7: Eri\u015fim Belirteci Yap\u0131land\u0131rmas\u0131 (\u0130ste\u011fe Ba\u011fl\u0131)<\/h2> <ol> <li>Sol men\u00fcden \"Token configuration\" (Belirte\u00e7 yap\u0131land\u0131rmas\u0131) se\u00e7ene\u011fine t\u0131klay\u0131n.<\/li> <li>\"Add optional claim\" (\u0130ste\u011fe ba\u011fl\u0131 talep ekle) d\u00fc\u011fmesine t\u0131klay\u0131n.<\/li> <li>Belirte\u00e7 t\u00fcr\u00fcn\u00fc se\u00e7in (ID, Access, SAML).<\/li> <li>\u0130htiyac\u0131n\u0131z olan talepleri se\u00e7in ve \"Add\" (Ekle) d\u00fc\u011fmesine t\u0131klay\u0131n.<\/li> <\/ol> <h2>Ad\u0131m 8: Uygulama Manifestini \u00d6zelle\u015ftirme (\u0130ste\u011fe Ba\u011fl\u0131)<\/h2> <ol> <li>Sol men\u00fcden \"Manifest\" (Manifest) se\u00e7ene\u011fine t\u0131klay\u0131n.<\/li> <li>Uygulaman\u0131z\u0131n davran\u0131\u015f\u0131n\u0131 daha ayr\u0131nt\u0131l\u0131 yap\u0131land\u0131rmak i\u00e7in JSON format\u0131ndaki manifestte de\u011fi\u015fiklikler yapabilirsiniz.<\/li> <li>De\u011fi\u015fiklikleri yapt\u0131ktan sonra \"Save\" (Kaydet) d\u00fc\u011fmesine t\u0131klay\u0131n.<\/li> <\/ol> <h2>Ad\u0131m 9: Branding ve \u00d6zelle\u015ftirme<\/h2> <ol> <li>Sol men\u00fcden \"Branding\" (Markalama) se\u00e7ene\u011fine t\u0131klay\u0131n.<\/li> <li>Uygulama ad\u0131, logosu, ana sayfa URL'si, kullan\u0131m ko\u015fullar\u0131 URL'si ve gizlilik bildirimi URL'si gibi se\u00e7enekleri \u00f6zelle\u015ftirin.<\/li> <li>\"Save\" (Kaydet) d\u00fc\u011fmesine t\u0131klay\u0131n.<\/li> <\/ol> <h2>Ad\u0131m 10: Sahip Atama (\u0130ste\u011fe Ba\u011fl\u0131)<\/h2> <ol> <li>Sol men\u00fcden \"Owners\" (Sahipler) se\u00e7ene\u011fine t\u0131klay\u0131n.<\/li> <li>\"Add owners\" (Sahip ekle) d\u00fc\u011fmesine t\u0131klayarak uygulaman\u0131z\u0131 y\u00f6netecek ek kullan\u0131c\u0131lar atayabilirsiniz.<\/li> <\/ol> <h2>Uygulama Kodunda Kullan\u0131m \u00d6rne\u011fi<\/h2> A\u015fa\u011f\u0131da, Node.js ile MSAL (Microsoft Authentication Library) kullanarak Azure AD kimlik do\u011frulamas\u0131 yapan basit bir \u00f6rnek bulunmaktad\u0131r: <pre><code >const msal = require('@azure\/msal-node'); const config = { auth: { clientId: \"UYGULAMA_KIMLIGINIZ\", authority: \"https:\/\/login.microsoftonline.com\/KIRACI_KIMLIGINIZ\", clientSecret: \"ISTEMCI_GIZLI_ANAHTARINIZ\" } }; const cca = new msal.ConfidentialClientApplication(config); async function getToken() { const tokenRequest = { scopes: }; try { const response = await cca.acquireTokenByClientCredential(tokenRequest); return response.accessToken; } catch (error) { console.log(\"Hata olu\u015ftu:\", error); } } \/\/ Token'\u0131 kullanarak API \u00e7a\u011fr\u0131lar\u0131 yap\u0131n getToken().then(token =&gt; { console.log(\"Access Token:\", token); \/\/ Bu token ile API \u00e7a\u011fr\u0131lar\u0131 yapabilirsiniz }); <\/code><\/pre> <h2>S\u0131k Kar\u015f\u0131la\u015f\u0131lan Sorunlar ve \u00c7\u00f6z\u00fcmleri<\/h2> <ol> <li><strong>AADSTS65001: Kullan\u0131c\u0131n\u0131n onay\u0131\/iznini gerektiren yetkilendirilmi\u015f izinler i\u00e7in gerekli y\u00f6netici onay\u0131 verilmemi\u015f<\/strong> <ul> <li>\u00c7\u00f6z\u00fcm: Azure AD y\u00f6neticisinden \"Grant admin consent\" (Y\u00f6netici onay\u0131 ver) d\u00fc\u011fmesine t\u0131klamas\u0131n\u0131 isteyin.<\/li> <\/ul> <\/li> <li><strong>AADSTS700016: Uygulama bulunamad\u0131<\/strong> <ul> <li>\u00c7\u00f6z\u00fcm: Uygulama (istemci) Kimli\u011finin do\u011fru oldu\u011fundan emin olun.<\/li> <\/ul> <\/li> <li><strong>AADSTS7000215: Ge\u00e7ersiz istemci gizli anahtar\u0131 sa\u011fland\u0131<\/strong> <ul> <li>\u00c7\u00f6z\u00fcm: \u0130stemci gizli anahtar\u0131n\u0131z\u0131n s\u00fcresi dolmu\u015f olabilir, yeni bir tane olu\u015fturun.<\/li> <\/ul> <\/li> <li><strong>Y\u00f6nlendirme URI'si e\u015fle\u015fmiyor<\/strong> <ul> <li>\u00c7\u00f6z\u00fcm: Uygulaman\u0131zda kulland\u0131\u011f\u0131n\u0131z y\u00f6nlendirme URI'sinin, Azure Portal'da kaydetti\u011finizle tam olarak e\u015fle\u015fti\u011finden emin olun.<\/li> <\/ul> <\/li> <\/ol> <h2>En \u0130yi Uygulamalar<\/h2> <ol> <li><strong>Gizli anahtarlar\u0131 g\u00fcvenli tutun<\/strong>: \u0130stemci gizli anahtarlar\u0131n\u0131 kodunuza do\u011frudan yazmak yerine Azure Key Vault veya ortam de\u011fi\u015fkenleri gibi g\u00fcvenli y\u00f6ntemlerle saklay\u0131n.<\/li> <li><strong>En Az Ayr\u0131cal\u0131k \u0130lkesi<\/strong>: Uygulaman\u0131za sadece ihtiya\u00e7 duydu\u011fu minimum izinleri verin.<\/li> <li><strong>Sertifika Kullan\u0131m\u0131<\/strong>: Uzun vadeli ve daha g\u00fcvenli kimlik do\u011frulama i\u00e7in istemci gizli anahtar\u0131 yerine sertifikalar kullanmay\u0131 d\u00fc\u015f\u00fcn\u00fcn.<\/li> <li><strong>D\u00fczenli Rotasyon<\/strong>: \u0130stemci gizli anahtarlar\u0131n\u0131 d\u00fczenli olarak yenileyin ve eski anahtarlar\u0131 devre d\u0131\u015f\u0131 b\u0131rak\u0131n.<\/li> <li><strong>\u0130zleme ve Denetim<\/strong>: Azure AD Denetim G\u00fcnl\u00fcklerini kullanarak uygulama etkinliklerini d\u00fczenli olarak izleyin.<\/li> <\/ol> <h2>Sonu\u00e7<\/h2> Azure Portal'da uygulama kayd\u0131 olu\u015fturmak, uygulamalar\u0131n\u0131z\u0131n Azure hizmetleriyle g\u00fcvenli bir \u015fekilde entegre olmas\u0131n\u0131 sa\u011flayan temel bir ad\u0131md\u0131r. Bu rehberde \u00f6\u011frendi\u011finiz ad\u0131mlar\u0131 takip ederek, uygulaman\u0131z i\u00e7in kimlik do\u011frulama ve yetkilendirme altyap\u0131s\u0131n\u0131 kurabilir, modern kimlik do\u011frulama protokollerinin avantajlar\u0131ndan yararlanabilirsiniz. Daha fazla bilgi i\u00e7in <a href=\"https:\/\/docs.microsoft.com\/azure\/active-directory\/develop\/\">Microsoft Identity Platform dok\u00fcmantasyonunu<\/a> inceleyebilirsiniz.","excerpt":"Azure platformunda uygulamalar\u0131n\u0131z\u0131n Azure Active Directory (Azure AD) kirac\u0131n\u0131zdaki kaynaklara g\u00fcvenli bir \u015fekilde eri\u015febilmesi i\u00e7in...","created_at":"2025-04-05 10:25:42","updated_at":"2026-09-23 12:25:49","category_id":6,"view_count":823,"reading_time":7,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-04-05 10:25:42","featured_image":"resimyok.jpg","slug":"azure-portalda-uygulama-kaydi-olusturma","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"}]