I used to modify the ejabberd 17.x scram sasl in step 2 and step 4 in file cyrsasl_scam.erl.. and now with the new version of ejabberd the related file(s) has been
cyrsasl_scam.erl