This pre-deploy error appears when attempting to deploy an Okta element which contains a user email or user id, which doesn't exist in the target environment.
What triggers this error?
When deploying to Okta, you may get the "Element references users which don’t exist in target environment" error, and an element won't be deployed because of this error.
This message shows up when Salto is trying to deploy Okta elements which contain a reference to one or more users, but some of these users do not exist in the target environment. This means that Salto can't automatically deploy the element as-is, and you'll have to solve the problem in order to deploy it.
How can I solve this?
To solve this issue, you have 3 options:
Manually add this user to your target Okta environment. After doing that, try deploying again for Salto to identify the newly added user.
Manually edit the element's NACL file, and change the missing user to one which exists in the target environment. You can edit the NACL in a workspace, or during a deployment, in the pre-deployment overview stage.
To edit a NACL during a deployment, open the element and then click the "edit" option shown on the right side of the element header
Add the omitMissingUsers option to your target Salto environment's configuration file. When this option is on, Salto will omit the missing user from the element in types that allow it.
When using environment deployments, your environment configuration can be accessed from the environment "Settings" tab:
When using workspaces, you can find the environment configuration in the
salto.config/adapters/okta/okta.naclfile.
Here's an sample configuration file which includes this option:okta {
fetch = {
include = [
{
type = ".*"
},
]
}
deploy = {
omitMissingUsers = true
}
}