Impersonate Users in 11.0?

I'm seeing that older documentation specifically states that users cannot be impersonated if we're using Windows Authentication or SSO, but I'm not seeing this noted on newer versions (10-11). Is this still the case?

Also struggling to understand how this functionality could work on an internal community if the restrictions are still true. Most internal communities use SSO and/or Windows Authentication. Is there some way to circumvent this for troubleshooting purposes?