My company has its own proprietary software that I have both built and maintained over the last 5 years
I am about to release a big change for all of my software to use OAuth2 instead of handling emails and passwords ourselves. Prior to this release because I managed 100% of the dataflow, I had a feature for the admins that they could generate user token to impersonate the user - this was especially useful for troubleshooting while in production.
My question is, what is the business standard for a developer who does not provide software for the open market, but supports private users for one company? Without the feature we had I am reduced to troubleshooting via screen-share with the end user themselves.
Would it be bad practice for me to implement a similar feature to what I had before? What do other companies do?