Add an option in the team settings to restrict membership to users that have at least one email address registered within a given domain. Team admins could override on a case-per-case basis.

This could be really useful from a business POV, where outsiders' access should be closely monitored and regularly reviewed.