CAS Authentication

This article contains instructions on how to configure a Qualtrics survey to use CAS to authenticate users. View descriptions of the three authentication options.

Please note: IAM has announced plans to transition HarvardKey from Apereo CAS to Okta and retire the CAS Protocol. As a result, the current CAS authentication type in Qualtrics will be deprecated prior to summer of 2026. For now, users can continue using CAS authentication. If you have any questions about this transition, please submit a ticket.

Set up a Qualtrics Survey so that participants must log in with their HarvardKey

1. Edit the Survey Flow

   
   

   1. Go into a survey and click on “Survey Flow" in the left navigation
      

   2. Add a new element
      

   3. Choose "Authenticator"
      

   4. For Authentication Type choose "SSO" and for SSO Type choose "CAS". Fill in the remaining fields as shown below. Don't bother clicking the "Test CAS Connection" button -- it doesn't work.
      
      Note that after setting this up, using the Preview Survey feature will not work correctly.

   5. Make sure this Authenticator block is the first element at the very top of your Survey Flow. If it isn't, click on "Move" to drag and drop it to the top. Also be sure that all subsequent question blocks or branches are nested beneath the Authenticator block so respondents must authenticate before they can view the survey questions.
      
   6. Click "Save Flow"

2. Confirm your Survey Options

   
   
   1. Click on “Survey Options” in the left navigation
      
   2. Click on Security in the left Options panel. Survey access should be set to "Available to anyone"
      

3. Distribute your Survey

   You can now distribute your survey using any of the regular Qualtrics distribution options. When users access your survey they will be automatically prompted to log in using their Harvard Key.

Get help

• Chat: Log in to chat live with a HUIT technician
• Submit a ticket
• Call: (617) 495-7777