User anonymity while using user_external_login_register()?
Would it be sufficient to hash the username and/or password through something like sha1()?

You then wouldn't be storing campus data locally, as the hash is one way.  You'd still be able to check against it later as Drupal would store the hashes.