JBE uses Google sign-in for production teams and only allows approved publisher domains.
Recovery is handled by administrators so accounts are not reopened without review. That keeps publishing roles, domain access, and audit history under control.