Docs 15079 md5 usage in scram sha 1 (#626)

* Docs 15079 md5 usage in scram sha 1 (#612)

* DOCS-15079-md5-usage-in-SCRAM-SHA-1

* DOCS-15079-md5-usage-in-SCRAM-SHA-1

* DOCS-15079-md5-usage-in-SCRAM-SHA-1

* DOCS-15079-md5-usage-in-SCRAM-SHA-1

* DOCS-15079-md5-usage-in-SCRAM-SHA-1

* DOCS-15079-md5-usage-in-SCRAM-SHA-1

Co-authored-by: jason-price-mongodb <[email protected]>

* DOCS-15079-md5-usage-in-SCRAM-SHA-1

* DOCS-15079-md5-usage-in-SCRAM-SHA-1

Co-authored-by: jason-price-mongodb <[email protected]>

Author: jason-price-mongodb

source/core/security-scram.txt

@@ -107,12 +107,16 @@ The minimum driver versions that support ``SCRAM`` are:
 Additional Information
 ----------------------
 
-- `Blog Post: Improved Password-Based Authentication in MongoDB 3.0: SCRAM
-  Explained (Part 1)
-  <https://www.mongodb.com/blog/post/improved-password-based-authentication-mong
-  odb-30-scram-explained-part-1?tck=docs_server>`_
-
-- `Blog Post: Improved Password-Based Authentication in MongoDB 3.0: SCRAM
-  Explained (Part 2)
-  <https://www.mongodb.com/blog/post/improved-password-based-authentication-mong
-  odb-30-scram-explained-part-2?tck=docs_server>`_
+.. include:: /includes/md5-and-scram-sha-1.rst
+
+.. seealso::
+
+   - `Blog Post: Improved Password-Based Authentication: SCRAM Explained
+     (Part 1)
+     <https://www.mongodb.com/blog/post/improved-password-based-authentication-mong
+     odb-30-scram-explained-part-1?tck=docs_server>`_
+
+   - `Blog Post: Improved Password-Based Authentication: SCRAM Explained
+     (Part 2)
+     <https://www.mongodb.com/blog/post/improved-password-based-authentication-mong
+     odb-30-scram-explained-part-2?tck=docs_server>`_

source/includes/md5-and-scram-sha-1.rst

@@ -0,0 +1,12 @@
+If you use :ref:`SCRAM-SHA-1 <authentication-scram-sha-1>`:
+
+- :term:`md5` is necessary but is not used for cryptographic purposes,
+  and
+
+- if you use :ref:`FIPS mode <fips-overview>`, then instead of
+  :ref:`SCRAM-SHA-1 <authentication-scram-sha-1>` use:
+  
+  - :ref:`SCRAM-SHA-256 <authentication-scram-sha-256>`,
+  - :ref:`Kerberos <security-kerberos>`,
+  - :ref:`LDAP <security-ldap>`, or
+  - :ref:`x.509 <security-auth-x509>`

source/tutorial/configure-fips.txt

@@ -242,3 +242,5 @@ Additional Considerations
 --------------------------
 
 .. include:: /includes/extracts/4.2-changes-fips.rst
+
+.. include:: /includes/md5-and-scram-sha-1.rst