1) Create a config setting (to be later moved into database and admin console) to restrict team creation to emails from a specific domain, e.g. @example.com
2) Add an error message if email in team creation screen (attached) doesn't contain a valid domain, but do not reveal the domain--example: "Email must be from a specific domain (e.g. @example.com). Please ask your systems administrator for details."