{"id":34086,"date":"2025-11-11T01:40:55","date_gmt":"2025-11-10T22:40:55","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=34086"},"modified":"2025-11-11T01:40:55","modified_gmt":"2025-11-10T22:40:55","slug":"ubuntu-16-04-uzerinde-saml-kimlik-dogrulamasi-icin-simplesamlphp-kurulumu-ve-yapilandirmasi","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/ubuntu-16-04-uzerinde-saml-kimlik-dogrulamasi-icin-simplesamlphp-kurulumu-ve-yapilandirmasi\/","title":{"rendered":"Ubuntu 16.04 \u00dczerinde SAML Kimlik Do\u011frulamas\u0131 \u0130\u00e7in SimpleSAMLphp Kurulumu ve Yap\u0131land\u0131rmas\u0131"},"content":{"rendered":"

<\/p>\n

Ubuntu 16.04 \u00dczerinde SAML Kimlik Do\u011frulamas\u0131 \u0130\u00e7in SimpleSAMLphp Kurulumu ve Yap\u0131land\u0131rmas\u0131<\/h2>\n

Giri\u015f<\/h3>\n

G\u00fcn\u00fcm\u00fcz\u00fcn karma\u015f\u0131k web uygulamalar\u0131 ve kurumsal a\u011f yap\u0131lar\u0131nda, kullan\u0131c\u0131lar\u0131n birden fazla servise tek bir kimlik bilgisiyle eri\u015febilmesi (Single Sign-On – SSO) kritik bir ihtiya\u00e7 haline gelmi\u015ftir. Bu ihtiyac\u0131 kar\u015f\u0131lamak i\u00e7in geli\u015ftirilen en yayg\u0131n standartlardan biri G\u00fcvenlik Onaylama \u0130\u015faretleme Dili (Security Assertion Markup Language – SAML)’dir. SAML, farkl\u0131 g\u00fcvenlik alanlar\u0131 aras\u0131nda kimlik do\u011frulama ve yetkilendirme verilerinin g\u00fcvenli bir \u015fekilde de\u011fi\u015fimini sa\u011flayan XML tabanl\u0131 bir protokold\u00fcr. Bu sayede kullan\u0131c\u0131lar, bir kimlik sa\u011flay\u0131c\u0131ya (Identity Provider – IdP) bir kez giri\u015f yaparak, birden fazla servis sa\u011flay\u0131c\u0131ya (Service Provider – SP) tekrar kimlik do\u011frulamas\u0131 yapmadan eri\u015febilirler.<\/p>\n

SimpleSAMLphp, PHP ile yaz\u0131lm\u0131\u015f, a\u00e7\u0131k kaynakl\u0131 ve kullan\u0131m\u0131 kolay bir SAML 2.0 IdP ve SP uygulamas\u0131d\u0131r. PHP tabanl\u0131 uygulamalar\u0131n\u0131za SAML kimlik do\u011frulama yetene\u011fi kazand\u0131rmak i\u00e7in ideal bir \u00e7\u00f6z\u00fcmd\u00fcr. Hem IdP hem de SP rol\u00fcnde \u00e7al\u0131\u015fabilme yetene\u011fi, esnek yap\u0131land\u0131rma se\u00e7enekleri ve geni\u015f topluluk deste\u011fi sayesinde, SimpleSAMLphp bir\u00e7ok geli\u015ftirici ve sistem y\u00f6neticisi i\u00e7in tercih sebebi olmu\u015ftur.<\/p>\n

Bu makalede, Ubuntu 16.04 i\u015fletim sistemi \u00fczerinde SimpleSAMLphp’nin nas\u0131l kurulaca\u011f\u0131n\u0131 ve hem servis sa\u011flay\u0131c\u0131 (SP) hem de kimlik sa\u011flay\u0131c\u0131 (IdP) olarak nas\u0131l yap\u0131land\u0131r\u0131laca\u011f\u0131n\u0131 ad\u0131m ad\u0131m detayl\u0131 bir \u015fekilde inceleyece\u011fiz. Ubuntu 16.04, uzun s\u00fcreli destek (LTS) s\u00fcr\u00fcm\u00fc olmas\u0131 nedeniyle hala bir\u00e7ok kurumsal ortamda kullan\u0131lmaktad\u0131r, bu y\u00fczden bu platforma \u00f6zel kurulum ve yap\u0131land\u0131rma ad\u0131mlar\u0131 b\u00fcy\u00fck \u00f6nem ta\u015f\u0131maktad\u0131r. Makalenin sonunda, SimpleSAMLphp’yi kullanarak g\u00fcvenli ve esnek bir SAML tabanl\u0131 kimlik do\u011frulama sistemi kurmu\u015f olacaks\u0131n\u0131z.<\/p>\n

\u00d6nko\u015fullar<\/h3>\n

SimpleSAMLphp kurulumuna ba\u015flamadan \u00f6nce, Ubuntu 16.04 sunucunuzda baz\u0131 temel bile\u015fenlerin kurulu ve yap\u0131land\u0131r\u0131lm\u0131\u015f olmas\u0131 gerekmektedir. Bu b\u00f6l\u00fcmde, gerekli t\u00fcm \u00f6nko\u015fullar\u0131 ve bunlar\u0131n kurulum ad\u0131mlar\u0131n\u0131 ele alaca\u011f\u0131z.<\/p>\n

Sistem G\u00fcncellemesi<\/h4>\n

\u0130lk ad\u0131m olarak, sunucunuzdaki paket listelerini g\u00fcncelleyin ve mevcut paketleri y\u00fckseltin:<\/p>\n

sudo apt update\nsudo apt upgrade -y<\/code><\/pre>\n
Apache2 Web Sunucusu Kurulumu<\/h4>\n
SimpleSAMLphp bir web uygulamas\u0131 oldu\u011fu i\u00e7in, bir web sunucusuna ihtiya\u00e7 duyar. Bu makalede Apache2 kullanaca\u011f\u0131z. Apache2’yi kurmak i\u00e7in a\u015fa\u011f\u0131daki komutu \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\n
sudo apt install apache2 -y<\/code><\/pre>\n
Kurulumdan sonra Apache2 servisinin \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olun:<\/p>\n
sudo systemctl status apache2<\/code><\/pre>\n
PHP ve Gerekli Uzant\u0131lar\u0131n Kurulumu<\/h4>\n
Ubuntu 16.04 varsay\u0131lan olarak PHP 7.0 s\u00fcr\u00fcm\u00fcn\u00fc sunar. SimpleSAMLphp’nin d\u00fczg\u00fcn \u00e7al\u0131\u015fmas\u0131 i\u00e7in baz\u0131 PHP uzant\u0131lar\u0131na ihtiyac\u0131 vard\u0131r. Gerekli PHP paketlerini ve uzant\u0131lar\u0131n\u0131 kurmak i\u00e7in a\u015fa\u011f\u0131daki komutu kullan\u0131n:<\/p>\n
sudo apt install php libapache2-mod-php php-xml php-mbstring php-gd php-json php-mysql php-ldap -y<\/code><\/pre>\n
*   php<\/code>: PHP \u00e7ekirdek paketi.
\n*   libapache2-mod-php<\/code>: Apache i\u00e7in PHP mod\u00fcl\u00fc.
\n*   php-xml<\/code>: XML i\u015fleme yetenekleri i\u00e7in gereklidir (SAML XML mesajlar\u0131 i\u00e7in).
\n*   php-mbstring<\/code>: \u00c7ok baytl\u0131 dizeleri i\u015flemek i\u00e7in gereklidir.
\n*   php-gd<\/code>: G\u00f6r\u00fcnt\u00fc i\u015fleme yetenekleri i\u00e7in gereklidir (\u00f6rne\u011fin, CAPTCHA).
\n*   php-json<\/code>: JSON i\u015fleme yetenekleri i\u00e7in gereklidir.
\n*   php-mysql<\/code>: Veritaban\u0131 tabanl\u0131 kimlik do\u011frulama kaynaklar\u0131 kullanacaksan\u0131z gereklidir.
\n*   php-ldap<\/code>: LDAP tabanl\u0131 kimlik do\u011frulama kaynaklar\u0131 kullanacaksan\u0131z gereklidir.<\/p>\n
Kurulumdan sonra, Apache’nin PHP mod\u00fcl\u00fcn\u00fc etkinle\u015ftirdi\u011finden emin olmak i\u00e7in Apache servisini yeniden ba\u015flat\u0131n:<\/p>\n
sudo systemctl restart apache2<\/code><\/pre>\n
Composer Kurulumu<\/h4>\n
SimpleSAMLphp’nin ba\u011f\u0131ml\u0131l\u0131klar\u0131n\u0131 y\u00f6netmek i\u00e7in Composer’\u0131 kullanaca\u011f\u0131z. Composer’\u0131 kurmak i\u00e7in a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 izleyin:<\/p>\n
sudo apt install curl -y\ncurl -sS https:\/\/getcomposer.org\/installer | php\nsudo mv composer.phar \/usr\/local\/bin\/composer\nsudo chmod +x \/usr\/local\/bin\/composer<\/code><\/pre>\n
Composer’\u0131n do\u011fru \u015fekilde kuruldu\u011funu kontrol etmek i\u00e7in:<\/p>\n
composer --version<\/code><\/pre>\n
SimpleSAMLphp Kurulumu<\/h3>\n
\u00d6nko\u015fullar tamamland\u0131ktan sonra, SimpleSAMLphp’yi sunucumuza kurmaya ba\u015flayabiliriz. G\u00fcvenlik en iyi uygulama olarak, SimpleSAMLphp’yi web sunucusunun k\u00f6k dizini (document root) d\u0131\u015f\u0131na kurmak \u00f6nerilir.<\/p>\n
SimpleSAMLphp Dosyalar\u0131n\u0131n \u0130ndirilmesi ve Yerle\u015ftirilmesi<\/h4>\n
SimpleSAMLphp’yi Composer kullanarak indirebilirsiniz. Bu, ba\u011f\u0131ml\u0131l\u0131klar\u0131 da otomatik olarak y\u00f6netece\u011finden \u00f6nerilen y\u00f6ntemdir. SimpleSAMLphp i\u00e7in \/var\/simplesamlphp<\/code> gibi bir dizin olu\u015ftural\u0131m:<\/p>\n
sudo mkdir \/var\/simplesamlphp\nsudo chown www-data:www-data \/var\/simplesamlphp\nsudo chmod 755 \/var\/simplesamlphp\ncd \/var\/simplesamlphp\nsudo -u www-data composer create-project simplesamlphp\/simplesamlphp --stability=stable .<\/code><\/pre>\n
Bu komut, \/var\/simplesamlphp<\/code> dizinine SimpleSAMLphp’nin en son kararl\u0131 s\u00fcr\u00fcm\u00fcn\u00fc indirecek ve t\u00fcm ba\u011f\u0131ml\u0131l\u0131klar\u0131 kuracakt\u0131r. -u www-data<\/code> komutu, Composer’\u0131n Apache kullan\u0131c\u0131s\u0131 (www-data) olarak \u00e7al\u0131\u015fmas\u0131n\u0131 sa\u011flar, bu da dosya izinleri sorunlar\u0131n\u0131 \u00f6nler.<\/p>\n
Apache Yap\u0131land\u0131rmas\u0131<\/h4>\n
SimpleSAMLphp’nin web aray\u00fcz\u00fcne eri\u015febilmek i\u00e7in Apache’de bir alias veya VirtualHost yap\u0131land\u0131rmas\u0131 yapmam\u0131z gerekiyor. Bu makalede, SimpleSAMLphp’nin www<\/code> dizinini bir alias olarak yap\u0131land\u0131raca\u011f\u0131z.<\/p>\n
Apache yap\u0131land\u0131rma dosyalar\u0131n\u0131z\u0131 d\u00fczenlemek i\u00e7in sudo nano \/etc\/apache2\/conf-available\/simplesamlphp.conf<\/code> komutunu kullan\u0131n ve a\u015fa\u011f\u0131daki i\u00e7eri\u011fi ekleyin:<\/p>\n
Alias \/simplesaml \/var\/simplesamlphp\/www\n\n\n    Require all granted\n<\/Directory><\/code><\/pre>\n
Bu yap\u0131land\u0131rma, \/simplesaml<\/code> URL’sine gelen istekleri \/var\/simplesamlphp\/www<\/code> dizinine y\u00f6nlendirecektir.<\/p>\n
Yap\u0131land\u0131rmay\u0131 etkinle\u015ftirin ve Apache’yi yeniden ba\u015flat\u0131n:<\/p>\n
sudo a2enconf simplesamlphp\nsudo systemctl restart apache2<\/code><\/pre>\n
Art\u0131k taray\u0131c\u0131n\u0131zdan http:\/\/your_server_ip_or_domain\/simplesaml<\/code> adresine giderek SimpleSAMLphp kurulum sihirbaz\u0131na eri\u015febiliyor olman\u0131z gerekir.<\/p>\n
Dosya \u0130zinleri<\/h4>\n
SimpleSAMLphp’nin g\u00fcnl\u00fck dosyalar\u0131, sertifikalar ve oturum verileri gibi baz\u0131 dizinlere yazma iznine ihtiyac\u0131 vard\u0131r. Bu dizinlerin www-data<\/code> kullan\u0131c\u0131s\u0131na ait oldu\u011fundan emin olun:<\/p>\n
sudo chown -R www-data:www-data \/var\/simplesamlphp\/log\nsudo chown -R www-data:www-data \/var\/simplesamlphp\/cert\nsudo chown -R www-data:www-data \/var\/simplesamlphp\/data<\/code><\/pre>\n
Temel Yap\u0131land\u0131rma<\/h3>\n
SimpleSAMLphp’nin temel yap\u0131land\u0131rmas\u0131, config\/config.php<\/code> ve config\/authsources.php<\/code> dosyalar\u0131 \u00fczerinden yap\u0131l\u0131r. Bu dosyalar, SimpleSAMLphp’nin davran\u0131\u015f\u0131n\u0131, g\u00fcvenlik ayarlar\u0131n\u0131 ve kimlik do\u011frulama kaynaklar\u0131n\u0131 tan\u0131mlar.<\/p>\n
config.php Dosyas\u0131n\u0131n Yap\u0131land\u0131r\u0131lmas\u0131<\/h4>\n
config\/config.php<\/code> dosyas\u0131, SimpleSAMLphp’nin ana yap\u0131land\u0131rma dosyas\u0131d\u0131r. \u00d6rnek bir dosya (config-templates\/config.php<\/code>) bulunur, bunu kopyalayarak d\u00fczenleyebilirsiniz:<\/p>\n
sudo cp \/var\/simplesamlphp\/config-templates\/config.php \/var\/simplesamlphp\/config\/config.php\nsudo nano \/var\/simplesamlphp\/config\/config.php<\/code><\/pre>\n
A\u015fa\u011f\u0131daki \u00f6nemli parametreleri d\u00fczenleyin:<\/p>\n
*   baseurlpath<\/code><\/strong>: SimpleSAMLphp’nin web \u00fczerinden eri\u015filebilir oldu\u011fu yolu belirtir. Apache alias’\u0131n\u0131za g\u00f6re ayarlay\u0131n.<\/p>\n
'baseurlpath' => 'simplesaml\/',<\/code><\/pre>\n
*   technicalcontact_name<\/code> ve technicalcontact_email<\/code><\/strong>: Hata durumlar\u0131nda ileti\u015fim kurulacak teknik ki\u015finin ad\u0131 ve e-posta adresi.<\/p>\n
'technicalcontact_name' => 'Y\u00f6netici',\n'technicalcontact_email' => 'admin@example.org',<\/code><\/pre>\n
*   auth.adminpassword<\/code><\/strong>: SimpleSAMLphp y\u00f6netim paneline eri\u015fim i\u00e7in kullan\u0131lacak \u015fifre. G\u00fcvenli bir \u015fifre belirleyin.<\/p>\n
'auth.adminpassword' => 'cok_guclu_bir_sifre', \/\/ KES\u0130NL\u0130KLE DE\u011e\u0130\u015eT\u0130R\u0130N!<\/code><\/pre>\n
*   secretsalt<\/code><\/strong>: G\u00fcvenlik i\u00e7in kullan\u0131lan rastgele bir dize. Yeni ve benzersiz bir dize olu\u015fturun. Y\u00f6netim panelinde “Configuration” sekmesinde \u00f6nerilen bir de\u011fer bulabilirsiniz.<\/p>\n
'secretsalt' => 'rastgele-benzersiz-bir-dize', \/\/ KES\u0130NL\u0130KLE DE\u011e\u0130\u015eT\u0130R\u0130N!<\/code><\/pre>\n
*   timezone<\/code><\/strong>: Sunucunuzun saat dilimi.<\/p>\n
'timezone' => 'Europe\/Istanbul',<\/code><\/pre>\n
*   enable.saml20-idp<\/code> ve enable.saml20-sp<\/code><\/strong>: Hangi rolleri etkinle\u015ftirmek istedi\u011finizi belirtin.
\n    *   Sadece SP olarak kullanacaksan\u0131z enable.saml20-idp<\/code> de\u011ferini false<\/code> yap\u0131n.
\n    *   Sadece IdP olarak kullanacaksan\u0131z enable.saml20-sp<\/code> de\u011ferini false<\/code> yap\u0131n.
\n    *   Hem SP hem IdP olarak kullanacaksan\u0131z ikisini de true<\/code> b\u0131rak\u0131n.<\/p>\n
'enable.saml20-idp' => true,\n'enable.saml20-sp' => true,<\/code><\/pre>\n
authsources.php Dosyas\u0131n\u0131n Yap\u0131land\u0131r\u0131lmas\u0131<\/h4>\n
config\/authsources.php<\/code> dosyas\u0131, SimpleSAMLphp’nin kullanaca\u011f\u0131 kimlik do\u011frulama kaynaklar\u0131n\u0131 tan\u0131mlar. \u00d6rnek bir dosya (config-templates\/authsources.php<\/code>) bulunur, bunu kopyalayarak d\u00fczenleyebilirsiniz:<\/p>\n
sudo cp \/var\/simplesamlphp\/config-templates\/authsources.php \/var\/simplesamlphp\/config\/authsources.php\nsudo nano \/var\/simplesamlphp\/config\/authsources.php<\/code><\/pre>\n
Bu dosyada, default-sp<\/code> ad\u0131nda bir servis sa\u011flay\u0131c\u0131 yap\u0131land\u0131rmas\u0131 ve example-userpass<\/code> ad\u0131nda basit bir kullan\u0131c\u0131 ad\u0131\/\u015fifre tabanl\u0131 kimlik do\u011frulama kayna\u011f\u0131 g\u00f6receksiniz.<\/p>\n
*   default-sp<\/code><\/strong>: Bu, SimpleSAMLphp’yi bir servis sa\u011flay\u0131c\u0131 olarak kullan\u0131rken referans alaca\u011f\u0131n\u0131z varsay\u0131lan yap\u0131land\u0131rmad\u0131r.<\/p>\n
'default-sp' => array(\n    'saml:SP',\n    \/\/ The entity ID of this SP.\n    \/\/ Can be omitted if the entity ID can be calculated from the base URL.\n    \/\/ 'entityID' => null,\n    \/\/ The IdP that this SP should contact.\n    \/\/ Can be omitted if you want to allow the user to choose an IdP from a list.\n    'idp' => null,\n    'privatekey' => 'saml.pem',\n    'certificate' => 'saml.crt',\n    \/*\n     * When using SAML 2.0, the IdP may request that the SP signs the authentication request.\n     * This setting controls whether the SP should sign the authentication requests.\n     * Note that this setting is ignored if the IdP does not request signed authentication requests.\n     *\/\n    'sign.authnrequest' => true,\n    \/*\n     * When using SAML 2.0, the IdP may request that the SP signs the logout request.\n     * This setting controls whether the SP should sign the logout requests.\n     * Note that this setting is ignored if the IdP does not request signed logout requests.\n     *\/\n    'sign.logoutrequest' => true,\n    \/*\n     * When using SAML 2.0, the IdP may request that the SP signs the logout response.\n     * This setting controls whether the SP should sign the logout responses.\n     * Note that this setting is ignored if the IdP does not request signed logout responses.\n     *\/\n    'sign.logoutresponse' => true,\n    ),<\/code><\/pre>\n
    idp<\/code> parametresini bo\u015f b\u0131rakmak, kullan\u0131c\u0131n\u0131n birden fazla IdP varsa se\u00e7im yapmas\u0131na olanak tan\u0131r. Tek bir IdP kullanacaksan\u0131z, buraya IdP’nizin entityID<\/code> de\u011ferini girebilirsiniz.
\n*   example-userpass<\/code><\/strong>: Bu, bir IdP olarak SimpleSAMLphp’yi test etmek i\u00e7in kullanabilece\u011finiz basit bir kimlik do\u011frulama kayna\u011f\u0131d\u0131r. Ger\u00e7ek d\u00fcnyada LDAP, SQL veya ba\u015fka bir dizin hizmeti kullanman\u0131z gerekir.<\/p>\n
'example-userpass' => array(\n    'exampleauth:UserPass',\n    'admin:adminpassword', \/\/ Kullan\u0131c\u0131 ad\u0131:\u015fifre\n    'test:testpassword',\n    ),<\/code><\/pre>\n
    Bu k\u0131sma kendi kullan\u0131c\u0131lar\u0131n\u0131z\u0131 ve \u015fifrelerinizi ekleyebilir veya daha sonra LDAP\/SQL gibi ger\u00e7ek bir kimlik do\u011frulama kayna\u011f\u0131 ile de\u011fi\u015ftirebilirsiniz.<\/p>\n
Sertifika Olu\u015fturma<\/h4>\n
SAML mesajlar\u0131n\u0131n g\u00fcvenli\u011fini sa\u011flamak i\u00e7in dijital imzalar ve \u015fifreleme kullan\u0131l\u0131r. SimpleSAMLphp, bu i\u015flemler i\u00e7in bir \u00f6zel anahtar (.pem<\/code>) ve bir genel sertifika (.crt<\/code>) dosyas\u0131na ihtiya\u00e7 duyar. Bu dosyalar cert<\/code> dizininde bulunur. E\u011fer mevcut de\u011fillerse, kendi kendine imzal\u0131 (self-signed) sertifikalar olu\u015fturabilirsiniz.<\/p>\n
cd \/var\/simplesamlphp\/cert\nsudo openssl req -newkey rsa:2048 -new -x509 -days 3650 -nodes -out saml.crt -keyout saml.pem<\/code><\/pre>\n
Bu komut, 2048 bit RSA anahtar\u0131 kullanarak 10 y\u0131l ge\u00e7erli (-days 3650<\/code>) bir sertifika ve \u00f6zel anahtar olu\u015fturur. Komut sizden baz\u0131 bilgiler isteyecektir (\u00fclke, \u015fehir, kurulu\u015f ad\u0131 vb.). Common Name<\/code> (Ortak Ad) alan\u0131na sunucunuzun tam nitelikli alan ad\u0131n\u0131 (FQDN) veya IP adresini girmeniz \u00f6nemlidir.
\nOlu\u015fturulan dosyalar\u0131n www-data<\/code> kullan\u0131c\u0131s\u0131 taraf\u0131ndan okunabilir oldu\u011fundan emin olun:<\/p>\n
sudo chown www-data:www-data saml.crt saml.pem\nsudo chmod 644 saml.crt\nsudo chmod 600 saml.pem<\/code><\/pre>\n
Servis Sa\u011flay\u0131c\u0131 (SP) Olarak Yap\u0131land\u0131rma<\/h3>\n
SimpleSAMLphp’yi bir servis sa\u011flay\u0131c\u0131 olarak yap\u0131land\u0131rmak, uygulaman\u0131z\u0131n bir kimlik sa\u011flay\u0131c\u0131dan kimlik do\u011frulama taleplerini almas\u0131n\u0131 ve kullan\u0131c\u0131 bilgilerini i\u015flemesini sa\u011flar.<\/p>\n
SP Metadata Olu\u015fturma<\/h4>\n
SimpleSAMLphp y\u00f6netim paneline (\u00f6rne\u011fin, http:\/\/your_server_ip_or_domain\/simplesaml<\/code>) gidin.
\n“Federation” sekmesine t\u0131klay\u0131n.
\n“Show metadata” ba\u015fl\u0131\u011f\u0131 alt\u0131nda, “Service Provider” b\u00f6l\u00fcm\u00fcndeki default-sp<\/code> i\u00e7in “Show metadata” ba\u011flant\u0131s\u0131na t\u0131klay\u0131n.
\nBurada, SP’nizin XML metadata’s\u0131n\u0131 g\u00f6receksiniz. Bu metadata’y\u0131 kopyalay\u0131n ve kimlik sa\u011flay\u0131c\u0131n\u0131za (IdP) verin. IdP, bu metadata’y\u0131 kullanarak SP’nizi tan\u0131yacak ve SAML ileti\u015fimini kuracakt\u0131r. Metadata, SP’nizin entityID<\/code>, Assertion Consumer Service (ACS) URL’si ve sertifika bilgilerini i\u00e7erir.<\/p>\n
Kimlik Sa\u011flay\u0131c\u0131 (IdP) Metadata’s\u0131n\u0131 Ekleme<\/h4>\n
SP’nizin IdP ile ileti\u015fim kurabilmesi i\u00e7in IdP’nin metadata’s\u0131na ihtiyac\u0131 vard\u0131r. IdP’nizden metadata XML dosyas\u0131n\u0131 al\u0131n. Bu dosyay\u0131 \/var\/simplesamlphp\/metadata<\/code> dizinine saml20-idp-remote.php<\/code> ad\u0131yla kaydedin.
\n\u00d6rne\u011fin, IdP’nizin metadata’s\u0131 idp-metadata.xml<\/code> ise:<\/p>\n
sudo nano \/var\/simplesamlphp\/metadata\/saml20-idp-remote.php<\/code><\/pre>\n
\u0130\u00e7eri\u011fi a\u015fa\u011f\u0131daki gibi d\u00fczenleyin (IdP’nizin entityID<\/code> ve SingleSignOnService<\/code> URL’sini kendi de\u011ferlerinizle de\u011fi\u015ftirin):<\/p>\n
<\/em>\n * SAML 2.0 IdP Remote metadata for SimpleSAMLphp.\n *\n * Remember to replace 'idp.example.org' with the real entity ID of your IdP.\n *\/\n\n$metadata['https:\/\/idp.example.org\/simplesaml\/saml2\/idp\/metadata.php'] = array(\n    'entityid' => 'https:\/\/idp.example.org\/simplesaml\/saml2\/idp\/metadata.php',\n    'SingleSignOnService' => array(\n        0 => array(\n            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',\n            'Location' => 'https:\/\/idp.example.org\/simplesaml\/saml2\/idp\/SSOService.php',\n        ),\n    ),\n    'SingleLogoutService' => array(\n        0 => array(\n            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',\n            'Location' => 'https:\/\/idp.example.org\/simplesaml\/saml2\/idp\/SingleLogoutService.php',\n        ),\n    ),\n    'certData' => 'MIICQDCCASqgAwIBAgIJANcET... (IdP'nizin sertifika verisi)',\n);<\/code><\/pre>\n
certData<\/code> alan\u0131na IdP’nizin sertifikas\u0131n\u0131 Base64 kodlu olarak eklemelisiniz. Genellikle IdP metadata XML’inde <\/code> etiketi alt\u0131nda bulunur.<\/p>\n
Uygulama Entegrasyonu (PHP \u00d6rne\u011fi)<\/h4>\n
\u015eimdi SimpleSAMLphp SP’yi kendi PHP uygulaman\u0131za nas\u0131l entegre edece\u011finizi g\u00f6relim. Varsayal\u0131m ki uygulaman\u0131z \/var\/www\/html\/myapp<\/code> dizininde bulunuyor.
\n\u00d6ncelikle, uygulaman\u0131z\u0131n index.php<\/code> veya kimlik do\u011frulamas\u0131 gerektiren herhangi bir sayfas\u0131nda SimpleSAMLphp k\u00fct\u00fcphanesini y\u00fcklemeniz ve bir SimpleSAML_Auth_Simple<\/code> nesnesi olu\u015fturman\u0131z gerekir.<\/p>\n
isAuthenticated()) {\n    \/\/ Kimlik do\u011frulamas\u0131 yap\u0131lmad\u0131ysa, IdP'ye y\u00f6nlendir\n    $as->requireAuth();\n}\n\n\/\/ Kimlik do\u011frulamas\u0131 ba\u015far\u0131l\u0131ysa, kullan\u0131c\u0131 niteliklerini al\n$attributes = $as->getAttributes();\n\necho \"
Ho\u015f Geldiniz, \" . htmlspecialchars($attributes['cn'][0]) . \"<\/h2>\";\necho \"
Kullan\u0131c\u0131 Nitelikleri:<\/p>\";\necho \"
\";\nprint_r($attributes);\necho \"<\/pre>\n
\";<\/p>\n
\/\/ Oturumu kapatma linki
\necho '<\/p>\n
getLogoutURL() . '\">Oturumu Kapat<\/a><\/p>\n
';
\n?><\/code>
\nBu basit \u00f6rnek, kullan\u0131c\u0131n\u0131n kimlik do\u011frulamas\u0131 yap\u0131lmam\u0131\u015fsa IdP’ye y\u00f6nlendirir. Ba\u015far\u0131l\u0131 bir kimlik do\u011frulamas\u0131ndan sonra, IdP’den gelen kullan\u0131c\u0131 niteliklerini (attributes) al\u0131r ve ekrana basar. cn<\/code> (Common Name) gibi nitelikler, IdP’nizin sa\u011flad\u0131\u011f\u0131 \u00f6zniteliklere ba\u011fl\u0131 olacakt\u0131r.<\/p>\n
Kimlik Sa\u011flay\u0131c\u0131 (IdP) Olarak Yap\u0131land\u0131rma<\/h3>\n
SimpleSAMLphp’yi bir kimlik sa\u011flay\u0131c\u0131 olarak yap\u0131land\u0131rmak, kullan\u0131c\u0131lar\u0131n\u0131z\u0131n kimlik bilgilerini do\u011frulamas\u0131n\u0131 ve bu bilgileri servis sa\u011flay\u0131c\u0131lara (SP) g\u00f6ndermesini sa\u011flar.<\/p>\n
IdP Metadata Olu\u015fturma<\/h4>\n
SimpleSAMLphp y\u00f6netim paneline (\u00f6rne\u011fin, http:\/\/your_server_ip_or_domain\/simplesaml<\/code>) gidin.
\n“Federation” sekmesine t\u0131klay\u0131n.
\n“Show metadata” ba\u015fl\u0131\u011f\u0131 alt\u0131nda, “Identity Provider” b\u00f6l\u00fcm\u00fcndeki saml20-idp-hosted<\/code> i\u00e7in “Show metadata” ba\u011flant\u0131s\u0131na t\u0131klay\u0131n.
\nBurada, IdP’nizin XML metadata’s\u0131n\u0131 g\u00f6receksiniz. Bu metadata’y\u0131 kopyalay\u0131n ve servis sa\u011flay\u0131c\u0131n\u0131za (SP) verin. SP, bu metadata’y\u0131 kullanarak IdP’nizi tan\u0131yacak ve SAML ileti\u015fimini kuracakt\u0131r.<\/p>\n
Kimlik Do\u011frulama Kaynaklar\u0131n\u0131 Yap\u0131land\u0131rma<\/h4>\n
config\/authsources.php<\/code> dosyas\u0131nda, IdP’nizin kullan\u0131c\u0131lar\u0131 nas\u0131l do\u011frulayaca\u011f\u0131n\u0131 tan\u0131mlaman\u0131z gerekir. Daha \u00f6nce bahsetti\u011fimiz example-userpass<\/code> basit bir test kayna\u011f\u0131d\u0131r. Ger\u00e7ek d\u00fcnyada genellikle LDAP veya SQL tabanl\u0131 bir kimlik do\u011frulama kayna\u011f\u0131 kullan\u0131l\u0131r.<\/p>\n
LDAP Kimlik Do\u011frulama Kayna\u011f\u0131 \u00d6rne\u011fi<\/h5>\n
E\u011fer bir LDAP sunucunuz varsa (\u00f6rne\u011fin OpenLDAP, Active Directory), SimpleSAMLphp’yi buna ba\u011flayabilirsiniz. authsources.php<\/code> dosyas\u0131n\u0131 d\u00fczenleyerek a\u015fa\u011f\u0131daki gibi bir LDAP kimlik do\u011frulama kayna\u011f\u0131 ekleyebilirsiniz:<\/p>\n
sudo nano \/var\/simplesamlphp\/config\/authsources.php<\/code><\/pre>\n
'ldap-auth' => array(\n    'authsource:LDAP',\n    'hostname' => 'ldap.example.org', \/\/ LDAP sunucunuzun adresi\n    'port' => 389, \/\/ LDAP portu (LDAPS i\u00e7in 636)\n    'attributes' => array('uid', 'cn', 'mail'), \/\/ SP'ye g\u00f6nderilecek nitelikler\n    'searchbase' => 'dc=example,dc=org', \/\/ Kullan\u0131c\u0131lar\u0131n aranaca\u011f\u0131 temel DN\n    'searchattribute' => 'uid', \/\/ Kullan\u0131c\u0131 ad\u0131 niteli\u011fi\n    'usernameattribute' => 'uid', \/\/ Oturum a\u00e7ma i\u00e7in kullan\u0131lacak nitelik\n    'binddn' => 'cn=admin,dc=example,dc=org', \/\/ LDAP ba\u011flama kullan\u0131c\u0131s\u0131 (okuma izni olan)\n    'bindpw' => 'admin_password', \/\/ LDAP ba\u011flama \u015fifresi\n    'dnpattern' => 'uid=%username%,ou=users,dc=example,dc=org', \/\/ Kullan\u0131c\u0131 DN deseni\n    'privileges' => true, \/\/ Y\u00f6netici haklar\u0131n\u0131 kullan\n    'referrals' => false,\n    'debug' => false,\n    'timeout' => 30,\n),<\/code><\/pre>\n
Bu yap\u0131land\u0131rmada, IdP’niz kullan\u0131c\u0131lar\u0131 LDAP sunucusu \u00fczerinden do\u011frulayacak ve uid<\/code>, cn<\/code>, mail<\/code> gibi nitelikleri SP’ye g\u00f6nderecektir.<\/p>\n
Servis Sa\u011flay\u0131c\u0131 (SP) Metadata’s\u0131n\u0131 Ekleme<\/h4>\n
IdP’nizin SP ile ileti\u015fim kurabilmesi i\u00e7in SP’nin metadata’s\u0131na ihtiyac\u0131 vard\u0131r. SP’nizden metadata XML dosyas\u0131n\u0131 al\u0131n. Bu dosyay\u0131 \/var\/simplesamlphp\/metadata<\/code> dizinine saml20-sp-remote.php<\/code> ad\u0131yla kaydedin.<\/p>\n
sudo nano \/var\/simplesamlphp\/metadata\/saml20-sp-remote.php<\/code><\/pre>\n
\u0130\u00e7eri\u011fi a\u015fa\u011f\u0131daki gibi d\u00fczenleyin (SP’nizin entityID<\/code> ve AssertionConsumerService<\/code> URL’sini kendi de\u011ferlerinizle de\u011fi\u015ftirin):<\/p>\n
<\/em>\n * SAML 2.0 SP Remote metadata for SimpleSAMLphp.\n *\n * Remember to replace 'sp.example.org' with the real entity ID of your SP.\n *\/\n\n$metadata['https:\/\/sp.example.org\/simplesaml\/module.php\/saml\/sp\/metadata.php\/default-sp'] = array(\n    'entityid' => 'https:\/\/sp.example.org\/simplesaml\/module.php\/saml\/sp\/metadata.php\/default-sp',\n    'AssertionConsumerService' => array(\n        0 => array(\n            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',\n            'Location' => 'https:\/\/sp.example.org\/simplesaml\/module.php\/saml\/sp\/saml2-acs.php\/default-sp',\n        ),\n    ),\n    'SingleLogoutService' => array(\n        0 => array(\n            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',\n            'Location' => 'https:\/\/sp.example.org\/simplesaml\/module.php\/saml\/sp\/saml2-logout.php\/default-sp',\n        ),\n    ),\n    'certData' => 'MIICQDCCASqgAwIBAgIJANcET... (SP'nizin sertifika verisi)',\n);<\/code><\/pre>\n
certData<\/code> alan\u0131na SP’nizin sertifikas\u0131n\u0131 Base64 kodlu olarak eklemelisiniz. Genellikle SP metadata XML’inde <\/code> etiketi alt\u0131nda bulunur.<\/p>\n
Nitelik E\u015fle\u015ftirme (Attribute Mapping)<\/h4>\n
IdP’nizden gelen kullan\u0131c\u0131 niteliklerini SP’nizin anlayaca\u011f\u0131 formata d\u00f6n\u00fc\u015ft\u00fcrmek gerekebilir. Bu i\u015flem config\/authproc.php<\/code> dosyas\u0131nda yap\u0131l\u0131r. Bu dosya, kimlik do\u011frulama s\u00fcrecinde nitelikleri manip\u00fcle etmenizi sa\u011flar.
\n\u00d6rnek olarak, IdP’niz uid<\/code> niteli\u011fini g\u00f6nderirken, SP’niz username<\/code> bekliyorsa, bir nitelik e\u015fle\u015ftirme kural\u0131 ekleyebilirsiniz:<\/p>\n
sudo cp \/var\/simplesamlphp\/config-templates\/authproc.php \/var\/simplesamlphp\/config\/authproc.php\nsudo nano \/var\/simplesamlphp\/config\/authproc.php<\/code><\/pre>\n
A\u015fa\u011f\u0131daki sat\u0131r\u0131 ekleyin veya d\u00fczenleyin:<\/p>\n
10 => array(\n    'class' => 'core:AttributeMap',\n    'uid' => 'username',\n),<\/code><\/pre>\n
Bu, uid<\/code> niteli\u011fini username<\/code> olarak yeniden adland\u0131r\u0131r.<\/p>\n
Test ve Sorun Giderme<\/h3>\n
Kurulum ve yap\u0131land\u0131rma tamamland\u0131ktan sonra, SAML ak\u0131\u015f\u0131n\u0131n d\u00fczg\u00fcn \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olmak i\u00e7in testler yapmal\u0131s\u0131n\u0131z.<\/p>\n
SimpleSAMLphp Y\u00f6netim Paneli \u00dczerinden Test<\/h4>\n
Y\u00f6netim paneline (\u00f6rne\u011fin, http:\/\/your_server_ip_or_domain\/simplesaml<\/code>) giri\u015f yap\u0131n.
\n*   Servis Sa\u011flay\u0131c\u0131 (SP) Testi<\/strong>: “Authentication” sekmesine t\u0131klay\u0131n. “Test configured authentication sources” alt\u0131nda, default-sp<\/code> ba\u011flant\u0131s\u0131na t\u0131klay\u0131n. Bu sizi IdP’ye y\u00f6nlendirmeli, kimlik do\u011frulamas\u0131n\u0131 tamamlamal\u0131 ve ard\u0131ndan SP’ye geri d\u00f6nerek kullan\u0131c\u0131 niteliklerini g\u00f6stermelidir.
\n*   Kimlik Sa\u011flay\u0131c\u0131 (IdP) Testi<\/strong>: “Authentication” sekmesine t\u0131klay\u0131n. “Test configured authentication sources” alt\u0131nda, example-userpass<\/code> (veya yap\u0131land\u0131rd\u0131\u011f\u0131n\u0131z LDAP\/SQL kayna\u011f\u0131) ba\u011flant\u0131s\u0131na t\u0131klay\u0131n. Bu, basit bir giri\u015f ekran\u0131 sunmal\u0131 ve ba\u015far\u0131l\u0131 bir giri\u015ften sonra kullan\u0131c\u0131 niteliklerini g\u00f6stermelidir.<\/p>\n
Uygulama Entegrasyon Testi<\/h4>\n
SP olarak yap\u0131land\u0131rd\u0131\u011f\u0131n\u0131z uygulaman\u0131za (\u00f6rne\u011fin, http:\/\/your_server_ip_or_domain\/myapp\/index.php<\/code>) eri\u015fmeyi deneyin. E\u011fer her \u015fey do\u011fru yap\u0131land\u0131r\u0131ld\u0131ysa, IdP’ye y\u00f6nlendirilecek, kimlik do\u011frulamas\u0131n\u0131 yapacak ve ard\u0131ndan uygulaman\u0131za geri d\u00f6nerek kullan\u0131c\u0131 niteliklerini g\u00f6receksiniz.<\/p>\n
Yayg\u0131n Sorunlar ve \u00c7\u00f6z\u00fcmleri<\/h4>\n
*   Metadata Uyu\u015fmazl\u0131\u011f\u0131<\/strong>: SP ve IdP metadata’lar\u0131n\u0131n do\u011fru ve g\u00fcncel oldu\u011fundan emin olun. entityID<\/code> de\u011ferleri, ACS\/SSO URL’leri ve sertifikalar e\u015fle\u015fmelidir.
\n*   Sertifika Hatalar\u0131<\/strong>: Sertifikalar\u0131n do\u011fru \u015fekilde olu\u015fturuldu\u011funu, certData<\/code> alanlar\u0131n\u0131n do\u011fru Base64 kodlu sertifika verisini i\u00e7erdi\u011fini ve \u00f6zel anahtar\u0131n (.pem<\/code>) izinlerinin do\u011fru (600<\/code>) oldu\u011fundan emin olun.
\n*   Zaman Damgas\u0131 Farklar\u0131 (Clock Skew)<\/strong>: SAML mesajlar\u0131 zaman damgalar\u0131na duyarl\u0131d\u0131r. SP ve IdP sunucular\u0131n\u0131n sistem saatlerinin senkronize oldu\u011fundan emin olun (NTP kullanarak).
\n*   Nitelik E\u015fle\u015ftirme Sorunlar\u0131<\/strong>: IdP’den gelen niteliklerin SP’nin bekledi\u011fi isimlerle e\u015fle\u015fti\u011finden emin olun. authproc.php<\/code> dosyas\u0131n\u0131 kontrol edin.
\n*   Y\u00f6nlendirme Hatalar\u0131<\/strong>: baseurlpath<\/code> ayar\u0131n\u0131n config.php<\/code> dosyas\u0131nda do\u011fru oldu\u011fundan emin olun. Apache alias veya VirtualHost yap\u0131land\u0131rmas\u0131n\u0131 kontrol edin.
\n*   Log Dosyalar\u0131n\u0131 Kontrol Etme<\/strong>: SimpleSAMLphp’nin log\/simplesamlphp.log<\/code> dosyas\u0131n\u0131 kontrol ederek detayl\u0131 hata mesajlar\u0131na ula\u015fabilirsiniz. Apache error loglar\u0131n\u0131 (\/var\/log\/apache2\/error.log<\/code>) da inceleyin.
\n*   Taray\u0131c\u0131 Geli\u015ftirici Ara\u00e7lar\u0131<\/strong>: Taray\u0131c\u0131n\u0131z\u0131n geli\u015ftirici ara\u00e7lar\u0131n\u0131 (Network sekmesi) kullanarak SAML mesaj ak\u0131\u015f\u0131n\u0131 izleyin. SAML mesajlar\u0131n\u0131 de\u015fifre etmek i\u00e7in SAML Chrome Panel gibi taray\u0131c\u0131 eklentileri kullan\u0131\u015fl\u0131d\u0131r.<\/p>\n
G\u00fcvenlik \u0130pu\u00e7lar\u0131<\/h3>\n
\u00dcretim ortam\u0131nda SimpleSAMLphp kullan\u0131rken a\u015fa\u011f\u0131daki g\u00fcvenlik ipu\u00e7lar\u0131n\u0131 g\u00f6z \u00f6n\u00fcnde bulundurman\u0131z \u00f6nemlidir:<\/p>\n
*   HTTPS Kullan\u0131m\u0131<\/strong>: T\u00fcm SAML ileti\u015fiminin HTTPS \u00fczerinden yap\u0131ld\u0131\u011f\u0131ndan emin olun. Bu, SAML mesajlar\u0131n\u0131n \u015fifrelenmesini ve b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc sa\u011flar. Apache’de SSL\/TLS yap\u0131land\u0131rmas\u0131 yap\u0131n ve ge\u00e7erli bir SSL sertifikas\u0131 kullan\u0131n.
\n*   G\u00fc\u00e7l\u00fc \u015eifreler ve secretsalt<\/code><\/strong>: auth.adminpassword<\/code> ve secretsalt<\/code> i\u00e7in karma\u015f\u0131k, tahmin edilemez de\u011ferler kullan\u0131n. secretsalt<\/code> i\u00e7in SimpleSAMLphp y\u00f6netim panelinde \u00f6nerilen de\u011feri kullanmak iyi bir ba\u015flang\u0131\u00e7t\u0131r.
\n*   Web K\u00f6k Dizin D\u0131\u015f\u0131nda Kurulum<\/strong>: SimpleSAMLphp’yi web sunucusunun k\u00f6k dizini d\u0131\u015f\u0131nda bir yere kurmak (\u00f6rne\u011fin \/var\/simplesamlphp<\/code>), hassas yap\u0131land\u0131rma dosyalar\u0131n\u0131n do\u011frudan web \u00fczerinden eri\u015filmesini engeller.
\n*   Dosya \u0130zinleri<\/strong>: Sertifika ve \u00f6zel anahtar dosyalar\u0131n\u0131n (.pem<\/code>, .crt<\/code>) ve yap\u0131land\u0131rma dosyalar\u0131n\u0131n do\u011fru izinlere sahip oldu\u011fundan emin olun. \u00d6zel anahtarlar\u0131n sadece web sunucusu kullan\u0131c\u0131s\u0131 taraf\u0131ndan okunabilir olmas\u0131 (chmod 600<\/code>) kritik \u00f6neme sahiptir.
\n*   Loglar\u0131 \u0130zleme<\/strong>: SimpleSAMLphp ve web sunucusu loglar\u0131n\u0131 d\u00fczenli olarak izleyin. Anormal aktiviteler veya hata mesajlar\u0131 i\u00e7in uyar\u0131lar ayarlay\u0131n.
\n*   Gereksiz Mod\u00fclleri Devre D\u0131\u015f\u0131 B\u0131rakma<\/strong>: Kullanmad\u0131\u011f\u0131n\u0131z SimpleSAMLphp mod\u00fcllerini devre d\u0131\u015f\u0131 b\u0131rak\u0131n (config.php<\/code> dosyas\u0131nda module.enable<\/code> ayar\u0131). Bu, sald\u0131r\u0131 y\u00fczeyini azalt\u0131r.
\n*   G\u00fcncel Tutma<\/strong>: SimpleSAMLphp’yi ve t\u00fcm ba\u011f\u0131ml\u0131l\u0131klar\u0131n\u0131 (PHP, Apache, Composer) d\u00fczenli olarak g\u00fcncelleyin. G\u00fcvenlik a\u00e7\u0131klar\u0131 genellikle yaz\u0131l\u0131m g\u00fcncellemeleriyle giderilir.
\n*   IP K\u0131s\u0131tlamalar\u0131<\/strong>: Y\u00f6netim paneline eri\u015fimi belirli IP adresleriyle k\u0131s\u0131tlamak, yetkisiz eri\u015fimi \u00f6nleyebilir. Bu, Apache VirtualHost yap\u0131land\u0131rmas\u0131nda Require ip<\/code> direktifi ile yap\u0131labilir.<\/p>\n
Sonu\u00e7<\/h3>\n
Bu makalede, Ubuntu 16.04 \u00fczerinde SimpleSAMLphp’nin nas\u0131l kurulaca\u011f\u0131n\u0131 ve SAML kimlik do\u011frulamas\u0131 i\u00e7in hem servis sa\u011flay\u0131c\u0131 (SP) hem de kimlik sa\u011flay\u0131c\u0131 (IdP) olarak nas\u0131l yap\u0131land\u0131r\u0131laca\u011f\u0131n\u0131 ayr\u0131nt\u0131l\u0131 bir \u015fekilde ele ald\u0131k. Ad\u0131m ad\u0131m kurulum, temel yap\u0131land\u0131rma, SP ve IdP rolleri i\u00e7in \u00f6zel ayarlar ve sorun giderme ipu\u00e7lar\u0131 sayesinde, art\u0131k kendi SAML tabanl\u0131 SSO \u00e7\u00f6z\u00fcm\u00fcn\u00fcz\u00fc kurabilecek bilgiye sahipsiniz.<\/p>\n
SimpleSAMLphp, esnekli\u011fi, geni\u015f \u00f6zelle\u015ftirme se\u00e7enekleri ve a\u00e7\u0131k kaynak yap\u0131s\u0131yla, PHP uygulamalar\u0131n\u0131za g\u00fc\u00e7l\u00fc bir kimlik do\u011frulama katman\u0131 eklemek i\u00e7in m\u00fckemmel bir ara\u00e7t\u0131r. Do\u011fru yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131nda ve g\u00fcvenlik en iyi uygulamalar\u0131 takip edildi\u011finde, kullan\u0131c\u0131lar\u0131n\u0131z i\u00e7in sorunsuz ve g\u00fcvenli bir SSO deneyimi sunar. SAML’nin karma\u015f\u0131kl\u0131\u011f\u0131na ra\u011fmen, SimpleSAMLphp bu s\u00fcreci b\u00fcy\u00fck \u00f6l\u00e7\u00fcde basitle\u015ftirerek geli\u015ftiricilerin ve sistem y\u00f6neticilerinin i\u015fini kolayla\u015ft\u0131rmaktad\u0131r. Unutmay\u0131n, \u00fcretim ortam\u0131nda kullanmadan \u00f6nce kapsaml\u0131 testler yapmak ve g\u00fcvenlik \u00f6nlemlerini titizlikle uygulamak hayati \u00f6nem ta\u015f\u0131r.<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Ubuntu 16.04 \u00dczerinde SAML Kimlik Do\u011frulamas\u0131 \u0130\u00e7in SimpleSAMLphp Kurulumu ve Yap\u0131land\u0131rmas\u0131\nGiri\u015f\nG\u00fcn\u00fcm\u00fcz\u00fcn karma\u015f\u0131k web uygulamalar\u0131","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1468],"tags":[],"class_list":{"0":"post-34086","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-ubuntu","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nUbuntu 16.04 \u00dczerinde SAML Kimlik Do\u011frulamas\u0131 \u0130\u00e7in SimpleSAMLphp Kurulumu ve Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/ubuntu-16-04-uzerinde-saml-kimlik-dogrulamasi-icin-simplesamlphp-kurulumu-ve-yapilandirmasi\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ubuntu 16.04 \u00dczerinde SAML Kimlik Do\u011frulamas\u0131 \u0130\u00e7in SimpleSAMLphp Kurulumu ve Yap\u0131land\u0131rmas\u0131\" \/>\n<meta property=\"og:description\" content=\"Ubuntu 16.04 \u00dczerinde SAML Kimlik Do\u011frulamas\u0131 \u0130\u00e7in SimpleSAMLphp Kurulumu ve Yap\u0131land\u0131rmas\u0131 Giri\u015f G\u00fcn\u00fcm\u00fcz\u00fcn karma\u015f\u0131k web uygulamalar\u0131\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/ubuntu-16-04-uzerinde-saml-kimlik-dogrulamasi-icin-simplesamlphp-kurulumu-ve-yapilandirmasi\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-10T22:40:55+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"12 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-16-04-uzerinde-saml-kimlik-dogrulamasi-icin-simplesamlphp-kurulumu-ve-yapilandirmasi\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-16-04-uzerinde-saml-kimlik-dogrulamasi-icin-simplesamlphp-kurulumu-ve-yapilandirmasi\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Ubuntu 16.04 \u00dczerinde SAML Kimlik Do\u011frulamas\u0131 \u0130\u00e7in SimpleSAMLphp Kurulumu ve Yap\u0131land\u0131rmas\u0131\",\"datePublished\":\"2025-11-10T22:40:55+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-16-04-uzerinde-saml-kimlik-dogrulamasi-icin-simplesamlphp-kurulumu-ve-yapilandirmasi\/\"},\"wordCount\":2846,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Ubuntu\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/ubuntu-16-04-uzerinde-saml-kimlik-dogrulamasi-icin-simplesamlphp-kurulumu-ve-yapilandirmasi\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-16-04-uzerinde-saml-kimlik-dogrulamasi-icin-simplesamlphp-kurulumu-ve-yapilandirmasi\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-16-04-uzerinde-saml-kimlik-dogrulamasi-icin-simplesamlphp-kurulumu-ve-yapilandirmasi\/\",\"name\":\"Ubuntu 16.04 \u00dczerinde SAML Kimlik Do\u011frulamas\u0131 \u0130\u00e7in SimpleSAMLphp Kurulumu ve Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-11-10T22:40:55+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-16-04-uzerinde-saml-kimlik-dogrulamasi-icin-simplesamlphp-kurulumu-ve-yapilandirmasi\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/ubuntu-16-04-uzerinde-saml-kimlik-dogrulamasi-icin-simplesamlphp-kurulumu-ve-yapilandirmasi\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-16-04-uzerinde-saml-kimlik-dogrulamasi-icin-simplesamlphp-kurulumu-ve-yapilandirmasi\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ubuntu 16.04 \u00dczerinde SAML Kimlik Do\u011frulamas\u0131 \u0130\u00e7in SimpleSAMLphp Kurulumu ve Yap\u0131land\u0131rmas\u0131\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Ubuntu 16.04 \u00dczerinde SAML Kimlik Do\u011frulamas\u0131 \u0130\u00e7in SimpleSAMLphp Kurulumu ve Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/ubuntu-16-04-uzerinde-saml-kimlik-dogrulamasi-icin-simplesamlphp-kurulumu-ve-yapilandirmasi\/","og_locale":"tr_TR","og_type":"article","og_title":"Ubuntu 16.04 \u00dczerinde SAML Kimlik Do\u011frulamas\u0131 \u0130\u00e7in SimpleSAMLphp Kurulumu ve Yap\u0131land\u0131rmas\u0131","og_description":"Ubuntu 16.04 \u00dczerinde SAML Kimlik Do\u011frulamas\u0131 \u0130\u00e7in SimpleSAMLphp Kurulumu ve Yap\u0131land\u0131rmas\u0131 Giri\u015f G\u00fcn\u00fcm\u00fcz\u00fcn karma\u015f\u0131k web uygulamalar\u0131","og_url":"https:\/\/fatihsoysal.com\/blog\/ubuntu-16-04-uzerinde-saml-kimlik-dogrulamasi-icin-simplesamlphp-kurulumu-ve-yapilandirmasi\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-11-10T22:40:55+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"12 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-16-04-uzerinde-saml-kimlik-dogrulamasi-icin-simplesamlphp-kurulumu-ve-yapilandirmasi\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-16-04-uzerinde-saml-kimlik-dogrulamasi-icin-simplesamlphp-kurulumu-ve-yapilandirmasi\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Ubuntu 16.04 \u00dczerinde SAML Kimlik Do\u011frulamas\u0131 \u0130\u00e7in SimpleSAMLphp Kurulumu ve Yap\u0131land\u0131rmas\u0131","datePublished":"2025-11-10T22:40:55+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-16-04-uzerinde-saml-kimlik-dogrulamasi-icin-simplesamlphp-kurulumu-ve-yapilandirmasi\/"},"wordCount":2846,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Ubuntu"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/ubuntu-16-04-uzerinde-saml-kimlik-dogrulamasi-icin-simplesamlphp-kurulumu-ve-yapilandirmasi\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-16-04-uzerinde-saml-kimlik-dogrulamasi-icin-simplesamlphp-kurulumu-ve-yapilandirmasi\/","url":"https:\/\/fatihsoysal.com\/blog\/ubuntu-16-04-uzerinde-saml-kimlik-dogrulamasi-icin-simplesamlphp-kurulumu-ve-yapilandirmasi\/","name":"Ubuntu 16.04 \u00dczerinde SAML Kimlik Do\u011frulamas\u0131 \u0130\u00e7in SimpleSAMLphp Kurulumu ve Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-11-10T22:40:55+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-16-04-uzerinde-saml-kimlik-dogrulamasi-icin-simplesamlphp-kurulumu-ve-yapilandirmasi\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/ubuntu-16-04-uzerinde-saml-kimlik-dogrulamasi-icin-simplesamlphp-kurulumu-ve-yapilandirmasi\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-16-04-uzerinde-saml-kimlik-dogrulamasi-icin-simplesamlphp-kurulumu-ve-yapilandirmasi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Ubuntu 16.04 \u00dczerinde SAML Kimlik Do\u011frulamas\u0131 \u0130\u00e7in SimpleSAMLphp Kurulumu ve Yap\u0131land\u0131rmas\u0131"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/34086","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=34086"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/34086\/revisions"}],"predecessor-version":[{"id":34087,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/34086\/revisions\/34087"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=34086"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=34086"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=34086"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}