Usually in these days, auth was done via RADIUS. It's possible that the company handoff was done by not-the-sysadmins, and the operators of the company only had the things they knew of how things worked, which was the spreadsheet, whereas the spreadsheet to the sysadmins was just the tool they used to create the RADIUS account information off of.