In the Site Access section I limited "Who can join your site" by our company domain and tested with a gmail account but was able to join the site.
Wasn't able to see any projects but still I don't want to have to manage this area as a risk for anyone to randomly join.
Am I missing something?
