I added an additional textbox to my login page, and I can see the value being included in the JSON wrapper of the xhr. Where I'm getting stuck is how to process the additional parameter. Where I'm at now: I've added a custom listener (just like the LDAP module), but I still can only access the usual parameters (password, username, request, etc.). I've tried a couple of things like accessing the request (IMxRuntimeRequest) but am out of ideas now.