It is possible to specify in principal-query all of clear-password-mapper, bcrypt-mapper, simple-digest-mapper, salted-simple-digest-mapper, scram-mapper at one moment. But, in fact, specifying only one mapper per principal query make sense. Change model/subsystem , that only adding on password mapper at a moment is allowed.