when a user with the same email-domain as the account authorized domain is registered, it will be automatically added to this account (an accountEmailDomain need to be configured)
new users can only be added to the account if they are invited
an identity provider will be used to provide new users access to this account (an accountEmailDomain need to be configured)
different methods to control how new users can join an account