It seems that SCRAM is hash-agnostic:https://en.wikipedia.org/wiki/Salted_Challenge_Response_Authentication_Mechanism#Protocol_overview
The significant advance is that is well known that SHA algorithms are notgood as Bcrypt for password hashing:
https://rietta.com/blog/bcrypt-not-sha-for-passwords/https://crypto.stackexchange.com/a/46552https://security.stackexchange.com/a/133251/27264